Re:Bitwarden PINs can be brute-forced
by ambiso on Monday March 20, 2023 @05:46AM
(#35229262)
> the user gets what they asked for, namely a password database secured by a 4 digit PIN.
A 4 digit PIN would be safe if Bitwarden securely enforced an attempt limit on the PIN. There's several options to implement this securely (see e.g. other comments about Windows Hello or use of a TPM).
A 4 digit PIN would be safe if Bitwarden securely enforced an attempt limit on the PIN. There's several options to implement this securely (see e.g. other comments about Windows Hello or use of a TPM).