There has been a standalone Windows desktop app since February. https://bitwarden.com/#download

> Especially with 1Password's ability to generate 2 factor tokens and put them in your pasteboard automatically so you don't ever have to pull up an Authenticator app!

Bitwarden also does this.

Thanks for letting me know! Somehow, it wasn't very obvious to me on both desktop app and OTP feature.

I still felt its sluggish performance on launch/search/sync was slowing me down a lot throughout the day.

> I still felt its sluggish performance on launch/search/sync was slowing me down a lot throughout the day.

I recently switched (maybe 5 weeks or so, ago, from 1Password to Bitwarden, after finding out about it on HN) I imported ~400 odd logins from 1Password, I honestly don't find it any slower than 1 Password.

I did notice that with Discord, both 1Password and Bitwarden now integrate with the new iOS password apis.

Maybe it's just my phone (6) but you may find that once you get 1000+ logins, Bitwarden falls apart pretty quickly. I've heard the same from people with 800+ logins. I remember it used to be very quick when I initially used it with a few plugins.

IIRC from their Github issue threads, Bitwarden is using Xamarin, and performant UI has been a consistent struggle with many login entries.

Bitwarden has had some performance issues in the past with managing larger (>~250) logins, but they've been greatly improved in the last few months and I no longer have an issue. My password database currently contains 870 logins.

Bitwarden's support via IRC/gitter was exceptional when I was experiencing issues with it. Not only did they fix the problem, but they provided a custom build for me with more verbose logging enabled and worked with me directly to figure out what the issue was. It was fixed in a couple of hours and I was able to run the patched build without issue until the fix had been merged and released.

Not Xamarin but Xamarin.Forms, basic Xamarin doesn't have issues with UI performance.

how in God's name do you end up with _thousands_ of logins, or even 800? I work in a pretty large MSP in IT with tons of different programs, websites, and clients. Even if I added every single password (which I most surely would not do), I can't imagine there being more than two or three hundred. Conservatively, if every of two hundred clients has thirty passwords, that's still only 600.

Two hundred times thirty is 6000

...well this is awkward.

Lol :)

Well, I don’t have 1000+ logins. Especially not among those I use frequently. However, I use password manager for far more than just logins.

Also, having combed through my entire catalog by having to manually import Bitwarden to 1Password, I’ve realized all those random startups I’ve made a login for or various sites for applications (job/school/etc) really add up quickly!

640kb ought to be enough for everyone, right? Because it's not your use case doesn't mean that it's the same for everyone.

I have over 1500 entries in my password manager. That's the result of using it for years and having every single account I signed up for registered in it. Including random forums I only ever posted once for support. So yes, people can have more than 100 entries in their password manager.

I switch from LP to bitwarden because I didn't trust LP anymore. It's fine but I find the autofill very dumb (will usually overwrote your password or random fields in various forms), and doesn't do subdomain matching well. Search or just opening the extension (on Firefox) is sluggish, and the android app is very slow (open and search). Automatically putting the 2FA in the clipboard has never worked for me either (Firefox on Linux). But I'll keep using it anyway because it's FOSS and not LP. You can even self host your instance if you like.

I've been a 1Password user for about 10 years, but I never moved to 1Password 6, as I didn't want to sync my vault to their servers (even if it's E2E encrypted). I've moved from being primarily an OSX user to Linux, and as a result, my experience has progressively gotten worse enough on 1PW (broken FF extension, general jankiness running on Wine) that I'm finally looking switch off, either to KeePassXC or to Bitwarden.

As far as a desktop app, it's electron-based, but there is a cross-platform Bitwarden app that seems to work well enough (responsive, minimizes to tray, etc).

I've yet to import all my passwords into Bitwarden (still comparing the Ruby, Go, and Rust standalone server implementations), so I guess we'll see where the experience is after I fully switch.

Regarding 2FA, while it doesn't totally expose you, if you put your token in your PW manager, you've definitely significantly weakened your security.

If you want to use 1Password on Linux, the experience is alright nowadays. I've been using this:

https://addons.mozilla.org/en-US/firefox/addon/1password-x-p...

..and it works great. Same as 1Password X for Chrome, it does not require a desktop app, and handles certain things like TOTP a bit more seamlessly.

You don't have to sync your vault in 1Password 6.

Nor in 1Password 7 (the latest version). They do push it pretty hard, and given their evasiveness/dishonesty about the business implications of subscriptions and the push I wouldn't blame anyone for being concerned that stand alone license+vault support might be removed in a future version (they have said there will be no more free version updates IIRC though). However, for the time being subscriptions and 1P's cloud service remain optional and possibly disappointing only in terms of eliminating what might have been, not anything that already existed.

share your sorrows regarding broken FF extension, most notably FT Deepdark. I haven't upgraded beyond FF 56 for same reason. (Sorry for deviating from main topic here)

Someone else pointed it out but it’s worth repeating that the convenience of having your 2FA on your laptop/desktop might be making a significant security trade off. It’s not really 2FA if it’s on the same device.

That’s true. I had lost sight of that... well, I wish more places would support a Yubikey!

Bitwarden itself allows you to require a Yubikey for each credential retrieval. I'm not sure how that would differ from having the Yubikey itself be the credential, from an attack surface standpoint.

I used 1Password for years on iOS and stored my Vault in iCloud. But AgileBits’s intention to change to subscription model was a deal breaker. Then they made some bad design decisions at the time of iOS 11 upgrade. I lost my vault, and given their hostility towards non-subscribers, I no longer feel comfortable trusting the product won’t fail again. I changed to BitWarden to handle my low-level net passwords, and that’s perfectly adequate.

Er, there IS a desktop client for Linux/windows/iOS. Also a CLI client, FWIW. And an API so you can fork and improve it yourself if you like.

I can't speak to the iOS or Safari versions, but it's just angularjs underneath the FF extension, so I imagine it's quite similar to what I've used. And I quite like the Ux.

And bitwarden has included a 2FA generator for at least a year.

Wait, there's an official cli client now?

[ed: here it is https://help.bitwarden.com/article/cli/#quick-start

Seems a little more gnarly for scripting than pass (pass leverages gpg agent for getting a passphrase/keeping a "session" - but might work for my primary need - simplyfing VPN logins) ]

> 1. A stand-alone desktop app. Quite annoying to have to open up a browser every time I want to access a password.

It looks like the have a native desktop app for Win/Mac/Lin? https://bitwarden.com/#download