bit warden or proton pass?

applesbana

I don’t like all my eggs in one basket where everything can be compromised with one hack. So I separate email from 2fa code generator from password manager from vpn

Stewart

Personally, I use the whole Proton suite, except for Proton Pass, where I use Bitwarden. I don't really want to put all my eggs in one basket.

applesbana

Stewart

Yeah, I’d consider divorcing your email from 2fa code generation (assuming you use that from proton). With access to your email account and 2fa codes, everything is pretty wide open.

Stewart

applesbana Yes, of course Bitwarden as a password manager and Aegis for 2FA, but I really don't see myself using PP at the moment.

mmmm

I'm a keepass user traditionally, I don't know much about Bitwarden - but ProtonPass has a killer feature, and thats the Simple Login integration.

applesbana

mmmm

I believe bitwarden can integrate with both simple login and addy.io

mmmm

applesbana really! I didn't know. I'm not a Bitwarden user. Apologies for the misinformation

RRZishe

I use proton pass because I just love their UI, way more modern than BW

fid02

Yup, Simplelogin has an API which Bitwarden uses. You can generate a new Simplelogin alias from within the Bitwarden Android app. Cheers. 🥂

Tryptamine

I use the whole Proton suite! That way I only need to memorize one very strong password, (well, OK, two, but the second one is a small modification of my phone unlock password to get out of BFU mode) as I use 2 password mode with 2FA with TOTP in between the two passwords! So I use Authy to hold my TOTPs, and ProtonPass to also hold all my logins and TOTPs.

That way, since I also use TOTP on Google, along with a 21 character pseudorandom passphrase with letters uppercase lowercase numbers and symbols (same for Proton, for both login and mailbox passwords) I only need to remember 4 20+ character strong passphrases. One for Google (Sandboxed Play), 2 for Proton, and one for Authy, though Authy usually restores from Seedvault with all data so I only need my Authy PIN.

That way from a new install I have access to my Google account, ProtonPass with all TOTP's, and I can unlock my mail, VPN, calendar, encrypted cloud drive and password manager easily!

This way its a high security setup,I can use advanced security features of Proton such as the Proton Sentinel program, which is a program for people with a high threat model (not me but I have it on anyways!) They monitor your account for sketchy activity constantly. I also have all my recovery file, phrase and backup codes in encrypted .7z files on my laptop and phone (only another 4 passwords to memorize, supervisor, boot, login for laptop and password, not PIN for phone!) So very unlikely I'll ever loose data of my Proton account.

That's how I do things. Everyone is different though, just putting this out there since I've found great success with this setup. For me it is very convenient, and I also believe it is quite secure with TOTP and strong passwords in all these accounts. I have fully random 30+ character all (96) character passwords on every other online account! (at least until I get security keys and more passkeys, I have one for Google but I'm leaving my password and TOTP on for now...)

jroddev

I was a long time KeePass user (with NextCloud syncing on my Home Server). I never used any of the KeePass browser extensions or autofill and instead would copy and paste credentials.

Over the last year or so I've started trying to support companies that I think are doing good things for the privacy community (including GrapheneOS). Companies that were working on things like Zero Knowledge, E2E Encryption, and Open Source Clients.

I bought a Bitwarden subscription and moved a lot of day to day passwords across. I've started using the Browser and Autofill services which I've learned to love. What I like about the Autofill is that it doesn't immediately fill the field, instead it gives me a popup that I need to click. This makes me a bit more comfortable it isn't silently filling hidden forms.

I used the 10 free alias you get with SimpleLogin through the Bitwarden Integration. Works well.
I also don't store any MFA in Bitwarden this reduces the amount of trust I need to put in a cloud service. MFA is stored on a YubiKey where possible. Most of my MFA codes are unfortunately TOTP, since GrapheneOS doesn't support WebAuthn without Play Services yet (on my wishlist).

With my NordVPN subscription almost up and since I was already using Proton Mail, Simple Login and they just acquired Standard Notes I figured that I would look at Proton Unlimited. Like others I'm not entirely comfortable with the 'all eggs in one basket', but I think I can manage. Some things I will just keep offline.

As part of going Unlimited I'm also trying out Proton Pass and so far it seems functionally equivalent to Bitwarden. Exporting from Bitwarden and importing into Proton was seamless.
One thing that caught me by surprise was that Proton Unlimited does not give you access to Unlimited Simple Login aliases. If I go into the Bitwarden or the Simple Login app and try to create a new alias I get "Go premium for unlimited aliases and more.". The unlimited alias you get for Proton Pass with Proton Unlimited only seems to be available through Proton Pass. It makes sense, but it could be an important distinction and it wasn't obvious to me.

As others have mentioned I think it depends if you want to be in the Proton ecosystem. You could "build your own ecosystem" - it's likely to be more work, but you retain more privacy. Bitwarden server can also be self-hosted.

fid02

jroddev Proton Unlimited does not give you access to Unlimited Simple Login aliases.

It does. Sign into your Simplelogin account and connect it to your Proton account in the settings.

[deleted]

[deleted] just for the love of the tea don't use Google search to do that. Also for things like this I am very very hesitant to use any of their apps or services:

https://www.bbc.co.uk/news/articles/ckv7jz9x1l9o

jroddev

fid02
Looks like you're correct. I had to logout and back in for it to work. I'm guessing I will also need to generate a new API token for Bitwarden but I would expect that to work now as well.

[deleted]

Proton Pass!