Re:Bitwarden PINs can be brute-forced
by senectus1 on Sunday March 19, 2023 @07:40PM
(#35225025)
It would not be a terrible idea for the pin to "expire" if tried more than "x" times unsuccessfully in a row, defaulting back to the master password.
[ Parent
| on HN ]
The Bitwarden client does this. The issue is that nothing prevents the attacker from taking the encrypted database and working with it directly, thereby bypassing that client protection.