Re:Bitwarden PINs can be brute-forced
by forty on Sunday March 19, 2023 @01:53PM
(#35221650)
I agree with the mindset and that's why I think it's good the data is still encrypted even if, as the author mentioned, they might as well have left the data in plaintext.
Sure entering a passphrase each time is better for security. But if the user chooses to set up a PIN instead, I feel the current behavior is reasonable.
Re:Bitwarden PINs can be brute-forced
by flxy on Sunday March 19, 2023 @03:58PM
(#35222909)
This is not the default behaviour and it has to be enabled per client/platform. The first unlock after a reboot still requires the master password as well.
Sure entering a passphrase each time is better for security. But if the user chooses to set up a PIN instead, I feel the current behavior is reasonable.