Standard IT practices (virus scan, physical security, Tripwire on the servers, etc.) are sufficient, for my purposes, to guard against the other threats. There are lots of password managers to choose from, but BitWarden seems very. I mean, sure, someone might get hold of my encrypted vault (which is easily found in the file system on your computer), but that gains an attacker nothing. Recovering a lost or forgotten username How do I log in to Reddit if I.
The potential threats from infiltrating my computers or servers is not nearly as likely vector for me. We consider Bitwarden superior to KeePass. What are your greatest risks? In my case, I am more concerned with losing my vault (house fire, losing my hardware, etc.).
Being accessible via web opens some potential attacks via key logging, browser injection (malicious JavaScript), or bugs in the browser itself.Īs with any security analysis, you need to create a threat matrix. What does have slight traction are some concerns over the web server itself. Hijacking the persistent storage of a Bitwarden server would gain you nothing. The Bitwarden architecture is such that the centralized vault store is not a security risk.
0 kommentar(er)
