Bitwarden - The unofficial Bitwarden community

cross-posted from: https://lemm.ee/post/33197502

The ports 80 and 443 are already used by Adguard Home. I didnt find any way to change those ports for Bitwarden.

cross-posted from: https://feddit.de/post/11733855

App can now be used to create and sign in with passkeys.

Some further context:

Right now the mobile apps are using a Framework called Xamarin which enables crossplatform mobile releases. Since it has become a roadblock for them (e.g. needed to wait for Microsoft to support passkeys in Xamarin) they are planning to switch to native apps (Swift for ios and Kotlin for android). Source

cross-posted from: https://sh.itjust.works/post/15450542

Going native: The future of the Bitwarden mobile app

Highly requested by the Bitwarden community, the new inline auto-fill menu greatly enhances the user experience, enabling users to fill login credentials faster than ever.

Hi everyone. I just noticed something odd. I believe, if I'm not mistaken, that I used to have Bitwarden's Vault as a Progressive Web App installed here on my system in the past, which I have since remove.

Today, though, I decided to reinstall it. So I opened up Bitwarden's website and sure enough, for my convenience, there was an “Install” icon on the address bar.

However! That seemed to have installed the Main Page, and not the vault page itself.

If I click “Login”, it will only open a new web browser tap to a login page, despite the fact that I'm already logged in.

Then I thought, fair enough, the “Install” icon was on the main page, the problem is, the Vault page's, doesn't seem to be available as a PWA, at all, as it doesn't have the option to be installed.

Was it all just a dream and I never had a Bitwarden Vault PWA, or something did change?

Hi mate,

I'm interested to know if it is possible to use a family plan in a self hosted Bitwarden instance.

Thanks

https://nvd.nist.gov/vuln/detail/CVE-2023-27706

Bitwarden Desktop v1.20.0 and above stores the biometric key in plaintext which allows a local attacker to decrypt the entire local vault if you are using Windows Hello and are not on the latest version. The Bitwarden Windows client before version 2023.4.0 is affected.

Details here: https://hackerone.com/reports/1874155

(shamelessly stolen from reddit)

Field value is linked to the item’s Username or Password. Given the right field name, Linked custom fields can be used to solve issues where your Browser Extension can’t auto-fill usernames and passwords for a particular site (learn more).

• Vault Timeout Policy: The Vault Timeout policy will apply a maximum Vault timeout duration for all members of your Organization (see here for details).
• Disable Personal Vault Export Policy: The Disable Personal Vault Export policy will prohibit non-Owner/non-Admin members of your Organization from exporting private Vault data (see here for details).
• Auto-scale Organization Seats: Teams and Enterprise Organizations will automatically scale up user seats as new users are invited. Organizations can set a limit on scaling to prevent the seat count from exceeding a specified number (see here for details).
• Custom Role - Improved Collection Permissions: Collection-management permissions for the Custom role have been expanded to include granular controls over whether the user can create, edit, or delete assigned or all Collections (see here for details).
• Admin Password Reset - Update Password after Reset: Passwords reset by an Admin must now be updated by the user they belong to immediately when they log in to Bitwarden (see here for details).
• Browser Extension - Autofill Span Elements: The Browser Extension can now auto-fill custom fields in the innerText of HTML elements (see here for details).
• Browser Extension - Automatic Biometrics Prompt: The Browser Extension can now automatically prompt for your biometric input when opened. You can toggle this behavior from the Settings menu (see here for details).
• Web Vault - Dark Mode: The Web Vault now has dark mode (see here for details)!
• CLI - generate Passphrase Options: The bw generate --passphrase command now includes the options --capitalize and --includeNumber (see here for details).