Just a reminder to everyone, from 15 May 2021, items in your Trash will be automatically deleted after 30 days. Before then, you should go through your Trash and make sure there’s nothing in there that you might still need!
From the latest release notes:
Since implementing Soft Delete back in 2020, we’ve been patient to take out the Trash. Starting 5/15/2021, we’ll activate the nightly job that will permanently delete items that have been in your trash for 30 days or more.
Prior to 5/15/2021, we recommend digging through your Trash for anything you might want to Restore!
I’d argue that 30 days is too short. A login being accidentally deleted might mean that you permanently lose access to that account (if you delete a login that has the password, 2FA secret, and 2FA recovery keys) which might be a business-critical issue.
So, perhaps allow a higher configurable retention period, at least for paid plans?
Mistakes still happen, and the export feature of BW is incomplete with attachments missing, so even with an external backup you can lose data. A configurable retention policy that covers more than 30 days is quite usual for services storing such important data.
If you have a self-hosted server instance, you can customize the trash timeout using an environment variable. If you want this functionality for Bitwarden-hosted accounts, then you can vote in the Feature Request topic linked below (which also contains additional detail about the solution for self-hosted servers):