Bitwarden uses end to end encryption. This severely reduces the risk their infra is attacked. The encryption keys exist on your devices only so it’s impossible to read the server side data.
The only real question is how much you trust Bitwarden as a company. Are they completely lying about E2EE to customers and auditors? If not, then Bitwarden is a good choice.
You’re right about Apple. I hope the EU will force openness into the ecosystem. I’m also hopeful that open and free alternatives will continue to become more viable in terms of user experience; the switch to Lemmy from Reddit has been mostly painless.
Thanks for the recommendations.
Edit: Raivo is perfect for a dedicated Authenticator app in the Apple ecosystem. I’ll likely pay for Bitwarden instead as I want to support their great product.
11 replies
Yubikey on a phone?
Yes, it's relatively convenient with NFC.
Yep. Just download the Yubico Authenticator app. Your OTPs wont show up unless you tap your physical Yubikey to your phone's NFC chip.
Only downside is, the Yubico Authenticator only allows 32 accounts. So i have my most important accounts on there.
Any iOS alternatives? Couldn’t find either of these in the App Store.
Bitwarden has been working well for me on iOS. It’s a paid feature though. $10 a year I think
Bitwarden has a 2fa function?i didn't know it. But I don't fully trust online apps for storing passwords though. A server can always be exploited
Bitwarden uses end to end encryption. This severely reduces the risk their infra is attacked. The encryption keys exist on your devices only so it’s impossible to read the server side data.
The only real question is how much you trust Bitwarden as a company. Are they completely lying about E2EE to customers and auditors? If not, then Bitwarden is a good choice.
Oh and ya, it’s has a one time passcode function. Works great! It will even autofill into OTP fields… sometimes 🙂
+1, well worth the 10 bucks.
You’re right about Apple. I hope the EU will force openness into the ecosystem. I’m also hopeful that open and free alternatives will continue to become more viable in terms of user experience; the switch to Lemmy from Reddit has been mostly painless.
Thanks for the recommendations.
Edit: Raivo is perfect for a dedicated Authenticator app in the Apple ecosystem. I’ll likely pay for Bitwarden instead as I want to support their great product.
I reccommend ente auth. privacyguides.org added it a while ago.