bitwarden

web

TypeScript2016–2021

bitwarden / web · Archived

web

The website vault (vault.bitwarden.com).

Web Development

Explore on GitHub Read Hacker News discussions

7Distinct people

7Mentions

0Explicit recommenders

2.6KGitHub stars

REPOSITORY AT A GLANCE

What to know before exploring

What it is

The website vault (vault.bitwarden.com).

GitHub

Where it is used

No documented product use has been verified yet.

What people are saying

No recommendation phrase was found in the indexed comments.

No classified warning is attached to this page. Read the discussions before treating silence as approval.

Also in these discussions

No other repository is repeatedly linked in the same discussions.

This week on Hacker News

Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 1:49:46 PM UTC.

No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.

Mentions over time

HN mentions by year7 dated mentions

Observed mentions: 2016-10-11 10:21:55 UTC to 2021-01-21 21:33:50 UTC.

Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.

View mention counts and date ranges

UTC ranges include their start and exclude their end. Select a period to filter the source evidence.
Period	Start (UTC)	End (exclusive, UTC)	Mentions	Submissions	Comments
2016	2016-01-01 00:00:00 UTC	2017-01-01 00:00:00 UTC	1	0	1
2017	2017-01-01 00:00:00 UTC	2018-01-01 00:00:00 UTC	0	0	0
2018	2018-01-01 00:00:00 UTC	2019-01-01 00:00:00 UTC	4	1	3
2019	2019-01-01 00:00:00 UTC	2020-01-01 00:00:00 UTC	1	0	1
2020	2020-01-01 00:00:00 UTC	2021-01-01 00:00:00 UTC	0	0	0
2021	2021-01-01 00:00:00 UTC	2022-01-01 00:00:00 UTC	1	0	1

What Hacker News says

7 sources

e12e·Jan 21, 2021

It's a little too much to sort through on mobile, but I believe this is a reasonable place to start looking (this is the web app, the server might be worth a look too). As far as I can figure out, it's not part of the cli client. https://github.com/bitwarden/web/commit/3c5a972bc9e959c5ced9... Reminder: bitwarden isn't just an awesome service, it's also committed to open source!

In Bitwarden releases “emergency access” feature

latchkey·Apr 5, 2019

Ok, I'll bite... I tried to import from LastPass and ran into this error: https://github.com/search?q=org%3Abitwarden+exceeds+the+maxi... So the notes fields can't store more than 10k, which isn't going to work for me at all. Update: Found this python script and ran it. https://github.com/bitwarden/web/issues/194#issuecomment-464... Only had two notes that were too long. Added them in by hand. Problem solved.

In Should you be concerned about LastPass uploading your passwords to its server?

jik·Dec 22, 2018

https://github.com/bitwarden/web/issues/303#issuecomment-446...

In Evaluation of five password managers

philliphaydon·Dec 22, 2018

I assume it's this issue. https://github.com/bitwarden/web/issues/303 Edit: Never mind, I can't find anything opened and fixed in ~17m.

In Evaluation of five password managers

chrismorgan·Nov 12, 2018

Six months or so ago, I switched from KeePassX with manual file synchronisation, to using bitwarden_rs on my own server, which runs Arch Linux, via a package on AUR. I haven’t had any trouble with it so far. The current version has been running for almost a month, and its resident memory is currently just over 11MB, viz. low and stable. That’s also roughly the size of the package and its data on disk. I do also have the optional web interface, which isn’t Rust; it uses inordinately much memory while building (https://github.com/bitwarden/web/issues/250) but is fine after that.

In Bitwarden Completes Third-Party Security Audit

cognitiaclaeves·Sep 30, 2018Submission

Ask HN: How to assess security risk of running open-source API for BitWarden

Hello everyone. I'd like to get some well-informed opinions about how to assess risk for using an open-source implementation (https://github.com/vvondra/bitwarden-serverless/) of the BitWarden API. What I like about this implementation is that it all runs in the cloud, under the free tier. It looks like it was designed to take advantage of cloud resources. I scanned it with SonarCloud, and it comes up green. I'm currently working on scanning it with OWASP Dependency-Checker. For now, I'm not able to get that scanner to work. Thinking pessimistically, I figured there could still be a chance that there is something malicious buried in the code somewhere that the scanners wouldn't pick up, so I intended on reading through the code, line-by-line, though I am unfamiliar with NodeJS, at this time. The code looks like it's not BitWarden's code a

Read the rest

t all, and that it's far fewer lines than it looks like Bitwarden wrote to implement its core. What I like about BitWarden is that they appear to be pretty security-minded: https://github.com/bitwarden/web/blob/master/SECURITY.md. They even have a program on HackerOne to identify and fix exploits. I'd rather not use the infrastructure that they host in Azure. I'd rather have an unknown, private URL that is still in the cloud that I use to manage my credentials through. That's where this server-less implementation comes in. I figure that I'm taking on the risk of using an unknown implementation. But I also figure that some of the risk is mitigated by running in AWS and by using AWS architecture. I think that all that is really left for me to do is to read through the code and make sure that no back-door calls are being made in it. Does anyone have anything to add? I'm not interested in other options, at this time, just in assessing the risk of using this server-less implementation.

1 points · Open discussion

lucb1e·Oct 11, 2016

There are a few reasons why I don't use stuff like 1Password or LastPass: - Not open source (or in part, e.g. the server side is closed); - Uploads stuff to the cloud (I want to self-host); - Not available on mobile; Bitwarden sounded quite good at first: mobile, sync and open source. I can inspect the code and run the web part (the vault, they call it) myself. Then I had a look at the web part: https://github.com/bitwarden/web/blob/master/src/Web/Program... It's C#. I'm not going to run a Windows Server just for this.

In Bitwarden – Free and Open Source Password Manager