1. Their auditing ("Event Logs") feature is unusable. It refers to items by some magical identifier which does not correspond to the name in the vault, e.g. "Viewed password for item ebabefac".
2. Payments by anything other than Credit Card are a mess, which is a serious pain if you have a lot of users. It took us weeks and many support interactions to get something as trivial as a bank transfer sorted.
3. It's still (!) lacking a feature to actually send people passwords ... as in sysadmin creates some account for a user, presses a magical button in BW, and it ends up in the user's vault (or maybe they get a message and are asked to import it, whatever). BW recommends you use the "Send" feature, which is basically a glorified pastebin.
4. The UX is .... not great. Organization vs Personal Collection view is confusing. Every time we onboard a new user we get questions about how they should store personal passwords.
It works well enough, but I don't think the enterprise plan is worth the 60/user/year price tag.
Names and all other identifiers can be changed freely, so Bitwarden refers to passwords by their unchangeable UUID, so you can keep track of an entry across any such changes.
What bitwarden lacks is an easy way to search for passwords by UUID, but that's a rather minor UX improvement.
> It's still (!) lacking a feature to actually send people passwords ...
Yeah, that surprised me as well. Back in 2014 or so we added magic password://uuid links to our internal password management tool, you can just send people the link, and when they clicked it, it opened that particular password, as long as they had access. I would've expected the competition to have picked up on it ages ago, but c'est la vie.
For exchanging passwords with external users, Send is reasonable enough IMO.
> The UX is .... not great.
Agreed. But given that everything else is solid and open source, I'll take it over any competitors, or continuing maintenance of our own tool, which quickly gets a whole lot more expensive...
It may have better auditing (though I confess I just pay for hosted so I can't say for sure).
It’s… fine, but many areas of integration with browser and on iOS are significantly less polished and pleasant to use. Things like credit cards are entirely manual on iOS. It’s definitely a worse experience on the convenience side.
That, and even though it’s relatively easy to migrate, it’s even easier to not spend the effort reworking your workflows and ways you use password tools.
Yeah, this. I've been using LastPass since 2012 - four years before BitWarden even existed. BitWarden actually looks excellent and I'm tempted to switch, but the easiest thing is just to not do anything.
Although that was prior to the shenanigans this post's article talks about.
It transferred EVERYTHING -- passwords, notes, credit cards etc. It's super easy.
But everyone that I know that uses it, hosts their own anyway (I don't agree with Moxie's thing of "people don't want to host their own servers and never will - clearly not true for some people). But that was beside the point anyway, open server design means you can choose who runs your server for you.
It seems like LastPass is angling to become the AOL of password managers, and by that I mean they want a bunch of old customers who never bother to switch to something better.