Question Is the Bitwarden Password Manager Extension secure?

[rashmi]

I'll add Bitwarden to my sister's setup, who doesn't know much about security. She may not update the desktop app. I find the extension better for her. The extension will auto-update without needing user interaction, right? Is the Bitwarden Password Manager Extension secure? Any suggestions regarding settings, etc.?

 

[Ink]

Yes. Browser extensions will auto-update.


Change the following in the Mobile App/Extension:

• Settings > Options > Clear Clipboard

Change the following in the Bitwarden Web Vault

• Enable 2-Factor Authentication - vault.bitwarden.com/#/settings/security/two-factor
• [Ask for Permission] Add a Trusted Emergency Contact - vault.bitwarden.com/#/settings/emergency-access

New Update - Bitwarden Password Manager added support for Argon2 KDF [Updated]

According to comments posted by Quexten at Bitwarden's community forums, the company has a 5-week release cycle, so we could expect Argon2 support to be added next month on all platforms if the tests are successful. The feature will be opt-in, and should be available on the same page as the...

malwaretips.com

Bitwarden is open-source.

Open Source | Bitwarden

As an open source project, Bitwarden is committed to source code transparency as a primary requirement for security solutions.

bitwarden.com

 

[rashmi]

Yes. Browser extensions will auto-update.

I'm just now trying it. Does the web vault require a different master password than the account's? Because signing into the web vault with the account's master password says invalid email or pass.

 

[Ink]

I'm just now trying it. Does the web vault require a different master password than the account's? Because signing into the web vault with the account's master password says invalid email or pass.

No, it's the same combination.

Let Bitwarden extension fill-in the credentials.

See my updated reply above.

 

[rashmi]

No, it's the same combination.

Let Bitwarden extension fill-in the credentials.

See my updated reply above.

I added the email and password to Bitwarden, but the web vault login says invalid. No problem signing in to the extension with the same data.

 

[rashmi]

No, it's the same combination.

I found the issue. I accidentally typed .ccom for the email address when creating my account. But why did Bitwarden accept the invalid address for the account creation?