53
Major password managers can leak logins in clickjacking attacks (www.bleepingcomputer.com)
submitted 1 year ago by to c/news@lemmy.linuxuserspace.show
23 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 4 points 1 year ago (5 children)

I'm an idiot using bw, do we have much confidence in any means of avoiding this yet or no?

  • permalink
  • fedilink
  • source
  • hideshow 5 child comments
    •
  • [–] [S] 9 points 1 year ago (2 children)

    The easy-ish way is to use the desktop app, but from the article:

    However, Bitwarden told BleepingComputer that the issues have been fixed in version 2025.8.0, rolling out this week.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 8 points 1 year ago (1 child)

    I have pretty unserious threat model, so hopefully bw team is trustworthy enough to believe in their upcoming fix.

    Many thanks Leo!

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 2 points 1 year ago

    My understanding is that bitwarden is generally very well regarded by security knowledgable folks, with the most secure option being keepass synced manually, and seemingly bitwarden behind that (among popular choices)

    That is my impression as a fairly non-technical casual privacy/security pursuer anyway 🤷‍♂️ I'm also a Bitwarden user as it's a better balance of practicality and security for my needs and usecase

  • permalink
  • fedilink
  • source
  • parent