News for hackers. Stuff that matters.

A comment on Bitwarden: Free, open-source password manager. Parent comment

Re:Bitwarden: Free, open-source password manager by SV_BubbleTime on Monday September 25, 2023 @10:16AM (#37644156)
1Password’s additional secret password to log in is an absolute non-starter for our corporation.

I could barely understand it myself let alone explain it to our lowest understanding employees.

[ Parent | on HN ]
Re:Bitwarden: Free, open-source password manager by amq on Monday September 25, 2023 @11:45AM (#37645745)
What are you using then? Because Bitwarden also requires an additional secret.
[ Parent | on HN ]
Re:Bitwarden: Free, open-source password manager by SV_BubbleTime on Monday September 25, 2023 @02:45PM (#37648644)
Not sure what you are using because my bitwarden does not have a secondary key.
[ Parent | on HN ]
Re:Bitwarden: Free, open-source password manager by amq on Monday September 25, 2023 @04:39PM (#37650305)
What is the primary login method? Because I'm using SSO, and it still requires a master password.
[ Parent | on HN ]
Re:Bitwarden: Free, open-source password manager by SV_BubbleTime on Monday September 25, 2023 @05:47PM (#37651172)
A master password isn’t what we’re talking about though.

1Password last I used it, asked for a master, and a secret extra password. I still cannot explain why.

Granted my setup was for corporate but I am pretty sure it’s the same for everyone.

My best guess is that they are trying to cover for weak masters in the way that LastPass was enforcing but failing to update their PBKDF2 interations.

Which IMO is stupid and a failure to enforce best practices at the user’s first input.

[ Parent | on HN ]
Re:Bitwarden: Free, open-source password manager by GoblinSlayer on Tuesday September 26, 2023 @06:25AM (#37657166)
Something like "reenter your password to check you know what you're typing"?
[ Parent | on HN ]