Bitwarden Completes Third-Party Security Audit

Re:Bitwarden Completes Third-Party Security Audit by h1d on Monday November 12, 2018 @05:01PM (#18436342)

I just want to mention how insanely insecure browsers' native password managers are. It asks you password only on export but never to fill on sites and you can see which sites are saved with no authentication, you just need access to the machine physically to access them all. Why do browsers never implement something as easy as lock the vault with OS account pass after a certain period after unlocking like any password managers do?

[ Parent | on HN ]

Re:Bitwarden Completes Third-Party Security Audit by shawnz on Monday November 12, 2018 @09:32PM (#18437957)

> Why do browsers never implement something as easy as lock the vault with OS account pass after a certain period after unlocking like any password managers do?

You must lock your workstation, it's not enough to just lock the password manager. If you leave your workstation unlocked then an attacker could install a keylogger that captures the password to unlock your password manager.

[ Parent | on HN ]

Re:Bitwarden Completes Third-Party Security Audit by echanfsw on Monday November 12, 2018 @06:17PM (#18436903)

Convenience >> security for most people, unfortunately.

[ Parent | on HN ]

Re:Bitwarden Completes Third-Party Security Audit by h1d on Monday November 12, 2018 @06:53PM (#18437086)

What's wrong with opt-in locking? Current security is a joke. Physical access and you're owned.

[ Parent | on HN ]