The most popular authenticator apps, such as Google and Microsoft's, are tied at the hip to major companies. It's just way too easy to crack texting/SMS 2FA. In that case, you may want to invest in one of Bitwarden's commercial tiers.įor $10 a year, you get a password strength report a gigabyte of storage for encrypted file attachments and 2FA hardware secure login support for YubiKey and/or Duo. Let's say you're not a Linux system administrator, and not as paranoid as I am. Don't have a server of your own? You can even install and run Bitwarden off a Raspberry Pi. If doing it from scratch is too daunting for you, you can set Bitwarden up pretty easily on your own machine using Docker containers. Suppose, however, you don't trust anyone with your IDs and passwords? In that case, you can do what I do and run your own Bitwarden server. Don't believe me? Check your email address or phone number on HaveIbeenPwned and prepare for an unpleasant surprise. Spoiler alert: odds are your passwords are already out there. This last feature checks to see if any of your passwords have already been exposed. The cost? You can run it for free on every device and browser you've got.įor free, you also get a cloud-based store for all your passwords, Bitwarden Web Vault a random password generator two-factor authentication (2FA) and the added safety of Bitwarden's database breach feature. With its browser extensions, you can also use it on Brave, Chrome, Edge, Firefox, Safari, Opera, Vivaldi, and Tor.

For example, as a client, you can run it on Linux, Windows, macOS, Android, iPhone, and iPad. Leaving aside the licensing issue, the practical side of Bitwarden is it's free to use both on a server or a client. I wish it were under, say, an Apache license, but it's still more open source-friendly than anything else out there so I'll live with it. Popular password manager LastPass to be spun out from LogMeIn.LastPass source code, blueprints stolen by intruder.

Intruders get their hands on user data in LastPass incident.LastPass admits attackers have a copy of customers' password vaults.The company admits the Bitwarden License does not qualify as open source under the Open Source Initiative (OSI) definition, but they 'believe that the license successfully balances the principles of openness and community with our business goals.' But for my money, or no money at all, you can't beat Bitwarden.īitwarden is a kinda sorta open source program.

They include 1Password, DashLane, and NordPass.

2fa bitwarden