LastPass breach and implications for BitWarden

Hey @laza thanks for checking in! Here is something I posted on Reddit last night:

Hey thanks for checking in! Yes, 100% of the information that you input into a Bitwarden vault is encrypted. You can also read more about our minimal data collection here: https://bitwarden.com/help/administrative-data/

And here is a link to some of the steps we take to protect the Bitwarden codebase.

The Bitwarden team continues to focus first and foremost on security, with the team undergoing regular security training, the open source codebase being under regular public scrutiny on Github, subjected to third party audits and consistently monitored by security researchers as part of the bug bounty program.

Whether you work for a security company or are protecting a family account, it is also important to remember that often when we hear about hacking, it is someone gaining access through social engineering attacks, which means a lot of the basics ring true for all team members, ensure that workstations are locked down, 2FA is utilized, zero trust where possible, and to be suspicious of any communications that rely on time/pressure to get a response.

6 Likes