News for hackers. Stuff that matters.
Re:Bitwarden PINs can be brute-forced by thrashh on Sunday March 19, 2023 @10:56PM (#35226716)
Your database IS protected with a pass phrase

When you enable the PIN, you deliberately weaken your security for convenience. However, when the database unloads, your database is still protected by your pass phrase.

Re:Bitwarden PINs can be brute-forced by ambiso on Monday March 20, 2023 @05:26AM (#35229118)
> However, when the database unloads, your database is still protected by your pass phrase.

This is not the case if you disable the "lock with master password on restart" option. In that case only your PIN is guarding access the the vault data.

Using a PIN shouldn't have to mean weakening the security, since there's several secure implementation options of a PIN. (See other comments about Windows Hello for example)