“You can setup Bitwarden to be much more secure than that. It won’t simply stay “open” but will auto lock after a time period that you set, or upon other factors.”
“My buddy did exactly this. He had all of his TOTP codes inside of Bitwarden, alongside all of his accounts and guess what?? He got fucking locked out, like a dickhead.”
“Its okay to store 2FA on Bitwarden except the code to Bitwarden itself, code to emails used in Bitwarden, bank accounts, email that you used to login most of your sites.”
“And I keep a free copy of Bitwarden for secure notes, etc. Bitwarden is in the process of revamping its UI and the screenshots I've seen look good. There's also Uplock to supplement AP, and it has a nice UI, but it's subscription (five free entries).”
“This morning I noticed that the vault on my bitwarden android app, (google play store) was empty. I tried syncing multiple times and nothing is showing up.”
“In this way I can do backups of Bitwarden exports, 2fa exports, some word file containing important notes. Just be aware: don't loose your private PGP key !”
“Use Bitwarden’s encrypted export for your vault, store it offline on an encrypted USB drive, and keep a second copy somewhere secure. Test restoring it periodically so you know the backup works.”
“If you use Bitwarden for TOTP, make sure your Bitwarden export includes those items, and consider having a second authenticator backup so one lost device doesn’t lock you out.”
“Export an encrypted Bitwarden vault backup periodically, store it offline (like a USB drive or printed recovery codes), and test that you can restore it. Keep multiple copies in separate secure locations.”
“Use Bitwarden’s encrypted JSON export rather than CSV, since CSV is plaintext. Keep multiple copies in different locations, protect the export with a strong unique password, and make sure your backup plan still works if your laptop, Proton Drive account, or phone is unavailable.”
“I also keep a thumbdrive with the exported bitwarden .json (encrypted) file that I update like once every 6 months. It's tied to my login which is on that piece of paper.”
“I use BitWarden. It is good as advertised. I choose Bitwarden because it works on my PCs, laptops, and Android phones. It also works without internet during power failures.”
“Ended up having to use Keeper. Prefer Bitwarden and that's what I use personally but if they can't bother to reply to an email, I'm never using them for my clients.”
“LastPass/1Password/Bitwarden - synced to the cloud, protected by a master password, could be theoretically accessed by an attacker from anywhere in the world.”
“I don't know how helpful it will be but on linux passkey has never worked on any version of firefox for me, regular firefox/librewolf/mullvad. The only browser on linux that has worked for me with passkeys was brave .”
“Fingerprint login is only a convenience unlock; after a timeout or restart, Bitwarden will require the master password. Check the app’s 2FA settings and save the recovery code somewhere secure.”
“You can always use the recovery code to disable 2fa. [https://bitwarden.com/help/two-step-recovery-code/](https://bitwarden.com/help/two-step-recovery-code/) Of course it needs to also be in a place you can retrieve it outside of BW”
“For the past couple of days the Bitwarden Firefox extension has been completely broken and unusable. Autofill doesn't works and since I logged out I haven't been able to login again.”
“The desktop app UI has been excruciatingly slow since I started using it. The browser extension is fast, but the desktop app takes something like 30 seconds to a minute to open a vault and render the UI. Scrolling is choppy, every click takes like 3 seconds for the UI to refresh.”
“His problem is when trying to access Bitwarden through the Web App in the browser, not the web extension. My bet is simply on human error (a wrong or mis-remembered password).”