Web interface for changing your password

[mdc1022 (Mark C)]

I have been browsing the forum and came across a post about changing your master password and only being able to do so on the webpage vault & not via the Bitwarden extension.It seems this post was some time ago with a new comment not too long ago. I wonder if there has been any news about this that we are not aware of yet? And how “safe” is vault. bitwarden. com ?

Possible way for attackers to grab your master password?

I’m just looking at setting up with Bitwarden, however I’m somewhat concerned over the possibility of the master password being compromised if the BitWarden server was compromised: It appears that at the moment, the only way to change your Bitwarden master password is to log in through the web vault and do it through there - my concern though is that if the Bitwarden server has been compromised. (Not too likely I would hope, but it’s a nice juicy target for hackers and we shouldn’t have to rel…

[Peter_H]

Take a look at this:

Security: end-to-end encryption, but master password entered in web form

@stsc It may help to explain that the web client isn’t a web page, it’s an entire javascript application that is displayed in the context of a browser, so it is effectively the same as using a desktop or mobile client, ensuring that we don’t ever get your Master Password. The code for the web vault can be seen here: GitHub - bitwarden/web: The website vault (vault.bitwarden.com). Here’s a broadcast we did to talk about how this works: