Bitwarden PINs can be brute-forced

Re:Bitwarden PINs can be brute-forced by TylerE on Sunday March 19, 2023 @07:45PM (#35225082)

At least by not allowing 4 you get rid of the two most common lazy date formats (and YYYY)

[ Parent | on HN ]

Re:Bitwarden PINs can be brute-forced by eptcyka on Monday March 20, 2023 @02:54AM (#35228134)

Does it matter if you can bruteforce a 4 digit pin in a day, if there's no TPM guarding it?

[ Parent | on HN ]

Re:Bitwarden PINs can be brute-forced by lxgr on Monday March 20, 2023 @08:34AM (#35230594)

Nothing prevents users from using 0YYYY or 0DDMM/0MMDD.

Every time some site ridiculously insists I "use a more secure password", I sigh and add "A1!$" to the end of my 32-character alphanumeric random string.

[ Parent | on HN ]