There's a point of security where you're already pretty secure, and adding more layers of security give you very little benefit security-wise, but make it a pain in the ass to use. That will be a lot safer than storing a KeePass DB file in your computer, as it can be compromised in case a virus is installed on your computer (it can send the database file, and keylog the password to decrypt it). Yes, you can also keep your passwords in encrypted text on a laminated page stored in a bank deposit. kdbx file from where I store it, locally. Whereas KeePass is essentially a cold storage and the only way to get access to my data starts at getting the. But Bitwarden is among the safest options (in my opinion at least).

It might help to elucidate in more depth what specific attack vectors you have in mind that need to be better mitigated. Bitwarden server administrators can't get your passwords. In the event that there is some sort of data breach on Bitwarden's server, they still can't get your passwords. You can also do this without directly exposing your Bitwarden instance to the internet (access from outside only via a VPN).

And you can optionally self-host if you decide that you trust your capability to do so securely more than theirs.

You may be missing that it's an open source project that encrypts everything client-side, which you can additionally protect further using a hardware security key so that your vault cannot be unlocked without it - even with your master password.

Deciding whether or not using something like Bitwarden is appropriate for you is a personal decision that should be informed by your individual threat model and specific use case.Ĭompromised by whoever has access to where it's stored No, it isn't, because as others have pointed out - '100% safe' doesn't exist.

Keepass vs bitwarden reddit