I run a self-hosted bitwarden server, which I love.
But the client is, in my opinion, not nearly as good as 1password. Its login detection is often disruptively wrong. The need to unlock the keychain each time you start a client is aggravating. The fact that the keychain doesn't lock itself when I lock the worstation is more aggravating. It's sensitive to server downtime when it should be able to work offline. The desktop app is either electron or something very similar and chews battery for me if I accidentally leave it running. 1password's secure notes are far richer. 1password's storage for software licenses is useful and bitwarden offers nothing similar that I've been able to find.
I'm not saying any of this to shit on bitwarden. I like it, and pay for it both in dollars to bitwarden and in time spent keeping the server running/patched. (Which I know is optional, but I really like having it self-hosted).
If 1password could offer me a decent linux desktop experience and a self hosted server, I'd switch back. I liked it that much better.
Have I Been Pwned partnered directly with 1Password, which is probably why they're able to send out notifications directly; Bitwarden has to worry about being rate-limited.
I'm not too sure what's meant by MFA availability, but Bitwarden also lets you use it as a TOTP generator + use 2FA for logging into your vault, though those are premium features.
If 1Password's claim to fame is functionality beyond password management, so be it, but that doesn't define it as better but rather broader scoped.
edit: I'm wrong, it didn't support touchID in OSX https://community.bitwarden.com/t/touch-id-support-for-macos...
I think when they switched to subscription model they left people who didn’t switch on an old version
It only beats 1Password on price.
If you don't want to pay for a fucking awesome app, good riddance to you.
https://news.ycombinator.com/item?id=21172569 is a good discussion on it.
When my current native install of 1pw stops working I'll be migrating elsewhere.
I haven't verified this myself, but standalone licences seem to be available for purchase in the app itself: https://discussions.agilebits.com/discussion/92275/how-do-i-...
Hence it's there, but intentionally dark patterned to near invisibility. They would prefer everyone on the pointlessly expensive sub.
> 1. Information We Collect and Receive
> Service Data (including Session and Usage data):
> When you use our Services, we receive information generated through the use of the Service, either entered by you or others who use the Services with you (for example, schedules, attendee info, etc.), or from the Service infrastructure itself, (for example, duration of session, use of webcams, connection information, etc.) We may also collect usage and log data about how the services are accessed and used, including information about the device you are using the Services on, IP addresses, location information, language settings, what operating system you are using, unique device identifiers and other diagnostic data ...
> Third Party Data: We may receive information about you from other sources, including publicly available databases or third parties from whom we have purchased data, and combine this data with information we already have about you. We may also receive information from other affiliated companies that are a part of our corporate group. This helps us to update, expand and analyze our records, identify new prospects for marketing, and provide products and services that may be of interest to you.
> Location Information: We collect your location-based information for the purpose of providing and supporting the service and for fraud prevention and security monitoring. If you wish to opt-out of the collection and use of your collection information, you may do so by turning it off on your device settings.
> Device Information: When you use our Services, we automatically collect information on the type of device you use, operating system version, and the device identifier (or "UDID").
That's pretty much everything given they put an extension in your browser and can collect all of that info for every page you visit
> 4. Information Sharing
> ... We may share your personal information with (a) third party service providers; (b) business partners; (c) affiliated companies within our corporate structure
> Examples of how we may share information with service providers include:
The above basically says they share your info with anyone they feel like
So I don't know how you think my comment has no basis in fact. They spell out what they can do in their privacy policy. Why would they spell it out if they weren't doing it?
Compare to 1password (note I use neither service and am in no way affiliated with 1password but for comparison it's telling
> Your data is yours, and we don't want to know anything about it. We don't use it, we don't share it, and we don't sell it.
> We only collect the information necessary to provide our services and help you with troubleshooting. Personally identifiable information is never shared with third parties.
People on HN complain about Google collecting and yet we seem to have LastPass with access to all webpages you visit and also able to track every service you use them with an their policy basically says they collect and share your data (something even Google doesn't do. AFAIK google doesn't share data)