<p>Most people think their passwords are safe. Most people are wrong. Henry sits down with Ryan Luibrand, Senior Product Marketing Manager at Bitwarden, to cover why open source changes the trust equation, the LastPass data breach, how KDF algorithms work, whether storing your TOTP codes in your password manager is a good idea, and more.</p><p>🔗 <strong>SOURCES &amp; LINKS</strong></p><ul><li>Written breakdown: <a href="https://techlore.tech/password-manager-security-explained-with-bitwarden/">https://techlore.tech/password-manager-security-explained-with-bitwarden/</a></li><li>Bitwarden: <a href="https://bitwarden.com/">https://bitwarden.com</a></li><li>Privacy Policy: <a href="https://bitwarden.com/privacy/">https://bitwarden.com/privacy/</a></li><li>Compliance &amp; Audit Reports: <a href="https://bitwarden.com/compliance/">https://bitwarden.com/compliance/</a></li><li>Security White Paper: <a href="https://bitwarden.com/help/bitwarden-security-white-paper/">https://bitwarden.com/help/bitwarden-security-white-paper/</a></li><li>Security Readiness Kit: <a href="https://bitwarden.com/resources/bitwarden-security-readiness-kit/">https://bitwarden.com/resources/bitwarden-security-readiness-kit/</a></li><li>HackerOne Bug Bounty: <a href="https://hackerone.com/bitwarden">https://hackerone.com/bitwarden</a></li><li>GitHub: <a href="https://github.com/bitwarden">https://github.com/bitwarden</a></li></ul><p> <br>⏱️ <strong>TIMESTAMPS</strong><br></p><ul><li>(00:00) - INTRO</li> <li>(00:52) - RYAN'S BACKGROUND</li> <li>(02:07) - BITWARDEN ORIGINS</li> <li>(03:09) - BITWARDEN TEAM</li> <li>(03:29) - FUNDING</li> <li>(06:18) - OPEN SOURCE</li> <li>(08:18) - AUDITS</li> <li>(10:11) - FORKING</li> <li>(11:19) - INTERNAL VS. COMMUNITY DEVELOPMENT</li> <li>(12:21) - SELF-HOSTING</li> <li>(14:13) - NEW NATIVE APPS</li> <li>(16:38) - ARE PASSWORD MANAGERS SECURE?</li> <li>(21:08) - WHY USE A DEDICATED PW MANAGER?</li> <li>(23:08) - CONCERNS WITH THE CLOUD</li> <li>(25:39) - ARGON2</li> <li>(29:16) - USERNAME KEY GENERATION</li> <li>(31:06) - LASTPASS DATA BREACH</li> <li>(37:17) - WHAT CAN BITWARDEN SEE?</li> <li>(39:40) - WHERE IS BITWARDEN DATA HOSTED?</li> <li>(40:18) - GOVERNMENT REQUESTS</li> <li>(41:08) - "EGGS IN ONE BASKET" ARGUMENT</li> <li>(43:57) - 2FA &amp; BITWARDEN AUTHENTICATOR</li> <li>(47:39) - PASSKEYS</li> <li>(49:04) - COMMUNITY VS. ENTERPRISE</li> <li>(50:17) - RYAN'S SETUP + ADVICE</li> <li>(53:45) - THIRD PARTY INTEGRATIONS</li> <li>(54:20) - AI</li> <li>(56:16) - PRICING</li> <li>(57:15) - F-DROID APP?</li> <li>(57:54) - LINUX APP?</li> <li>(58:12) - MORE THOUGHTS ON CLOUD SECURITY</li> <li>(59:10) - FINAL THOUGHTS</li> <li>(59:55) - WHAT'S NEXT?</li> </ul><p>🎥 <strong>VIDEO</strong><br><a href="https://www.youtube.com/watch?v=OSXB5oT-1sM" title="Watch on YouTube">Watch on YouTube</a><br> <br>🧡 <strong>SUPPORT TECHLORE</strong><br>Keep Techlore Talks independent &amp; growing: <strong> <a href="https://techlore.tech/support/#/portal/signup" rel="payment" title="★ Support this podcast ★">★ Support this podcast ★</a> </strong></p>

Techlore Talks

Techlore

Bitwarden on Zero Knowledge Encryption, Open Source Trust, and the LastPass Breach

APR 18, 202661 MIN
Techlore Talks

Bitwarden on Zero Knowledge Encryption, Open Source Trust, and the LastPass Breach

APR 18, 202661 MIN

Description

Most people think their passwords are safe. Most people are wrong. Henry sits down with Ryan Luibrand, Senior Product Marketing Manager at Bitwarden, to cover why open source changes the trust equation, the LastPass data breach, how KDF algorithms work, whether storing your TOTP codes in your password manager is a good idea, and more.🔗 SOURCES & LINKSWritten breakdown: https://techlore.tech/password-manager-security-explained-with-bitwarden/Bitwarden: https://bitwarden.comPrivacy Policy: https://bitwarden.com/privacy/Compliance & Audit Reports: https://bitwarden.com/compliance/Security White Paper: https://bitwarden.com/help/bitwarden-security-white-paper/Security Readiness Kit: https://bitwarden.com/resources/bitwarden-security-readiness-kit/HackerOne Bug Bounty: https://hackerone.com/bitwardenGitHub: https://github.com/bitwarden ⏱️ TIMESTAMPS(00:00) - INTRO (00:52) - RYAN'S BACKGROUND (02:07) - BITWARDEN ORIGINS (03:09) - BITWARDEN TEAM (03:29) - FUNDING (06:18) - OPEN SOURCE (08:18) - AUDITS (10:11) - FORKING (11:19) - INTERNAL VS. COMMUNITY DEVELOPMENT (12:21) - SELF-HOSTING (14:13) - NEW NATIVE APPS (16:38) - ARE PASSWORD MANAGERS SECURE? (21:08) - WHY USE A DEDICATED PW MANAGER? (23:08) - CONCERNS WITH THE CLOUD (25:39) - ARGON2 (29:16) - USERNAME KEY GENERATION (31:06) - LASTPASS DATA BREACH (37:17) - WHAT CAN BITWARDEN SEE? (39:40) - WHERE IS BITWARDEN DATA HOSTED? (40:18) - GOVERNMENT REQUESTS (41:08) - "EGGS IN ONE BASKET" ARGUMENT (43:57) - 2FA & BITWARDEN AUTHENTICATOR (47:39) - PASSKEYS (49:04) - COMMUNITY VS. ENTERPRISE (50:17) - RYAN'S SETUP + ADVICE (53:45) - THIRD PARTY INTEGRATIONS (54:20) - AI (56:16) - PRICING (57:15) - F-DROID APP? (57:54) - LINUX APP? (58:12) - MORE THOUGHTS ON CLOUD SECURITY (59:10) - FINAL THOUGHTS (59:55) - WHAT'S NEXT? 🎥 VIDEOWatch on YouTube 🧡 SUPPORT TECHLOREKeep Techlore Talks independent & growing: ★ Support this podcast ★