Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> I've not tried bitwarden, but from what I can see it's basically doing the same thing in terms of 1Password and its lockin.

I recently swapped from LastPass to Bitwarden because LastPass subscription went from 12 USD/year to 24 USD/year (a 100% price increase) without reason or benefits. Or well, the only reason is that Marvasol got acquired by Logemein. However compared to 1Password that's still cheaper; they cost 3 USD/month (36 USD/year).

Bitwarden is completely open source and free, unless you'd like to use premium features such as YubiKey (single use license cost 10 USD/year). Which I happen to use. Furthermore, there are more 2FA options available, and you can self-host.

> I'm grandfathered in to their one time pay use

Yeah, that explains your post. You bought a lifetime subscription and therefore don't feel the need to switch. Likewise, I got a lifetime subscription for Emby, so why would I care for Plex?



> I recently swapped from LastPass to Bitwarden because LastPass subscription went from 12 USD/year to 24 USD/year (a 100% price increase) without reason or benefits

Ah, I'd missed that price increase since my renewal was a couple months before it, but I saw that "jack the price" from Logmein in 2015 and I'm pretty sure it wasn't a one time jump. Cost them a bunch of users in a community I'm on where people were seeing their prices go from $300/year to several thousand for no improvements because they wanted to focus more on the more profitable enterprise area.

Guess I should start looking at options now so I'm not doing so with a looming deadline (and probably another price increase to at least match the 1Password subscription price).


Yes, I also looked into options. The options I considered were Bitwarden and the CLI open source solutions such as pass. I don't mind paying for a service like this, but it has to be reasonable.

Bitwarden is programmed by a "Microsoftie" (that used to be more of a problem back in the 00s and 90s than it is in the 10s). Its programmed in .NET, they host at Azure, and they use MS-SQL for data storage. But that's about the only negative thing I got against it. Because you don't have to store in the cloud (and you can even run the Ruby code native on *NIX now).

Ideally I'd prefer to have say GPGed databases of my passwords and my calendar on one or two clouds (like say Google Drive; 15 GB should be enough) and have seemless integration with Android, iOS, macOS, Linux, Windows but that isn't feasible. You'll end up with browser extension because it is practical.

One threat model they don't protect against is hostile JavaScript code. All browser extensions suffer from that problem though.


I mentioned it because the author was also using 1Password, I can only assume he had copy before they started their subscription model.

I could be wrong of course, but there are quite a few of us I think. With my version of 1Password I feel quite in control though. (Even if the business is moving away from freedom)


> I mentioned it because the author was also using 1Password, I can only assume he had copy before they started their subscription model. > I could be wrong of course, but there are quite a few of us I think. With my version of 1Password I feel quite in control though. (Even if the business is moving away from freedom)

Even offline software needs to be maintained. The author is preemptively moving away from 1Password since they're actively pushing their subscription business, and he's unsure how long his lifetime app purchase will remain working. The author is involved in Pushover (a Pushbullet alternative) which uses the (traditional) lifetime app model as well. So he understands the disadvantages of the model.

A few months ago I moved preemptively away from LastPass because my sub was running out end of nov 2017 and as announced the price was going up by 100% which I found unreasonable. Also a preemptive decision since I had to pay for two services for a few months but I didn't know if my transition to Bitwarden would be flawless. Turns out it was pretty much flawless (partly cause of the open data format from LastPass, CSV), but I didn't went with self-hosting. The author did go with self hosting but didn't wanna self-host .NET and MS-SQL which is fair enough. So they wrote their own server written in Ruby.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: