# BitWarden security review?

**URL:** <https://www.twit.community/t/bitwarden-security-review/9395>\
**Category:** Security Now\
**Created:** [February 19, 2021, 3:51pm UTC](https://www.twit.community/t/bitwarden-security-review/9395 "2021-02-19T15:51:38Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![alexhoward](https://sea2.discourse-cdn.com/flex020/user_avatar/www.twit.community/alexhoward/32/143_2.png) [@alexhoward](https://www.twit.community/u/alexhoward)\
**Post date:** [February 19, 2021, 3:51pm UTC](https://www.twit.community/t/bitwarden-security-review/9395/1 "2021-02-19T15:51:38Z")

</div>

Are there any episodes in which Steve reviews or discusses BitWarden or any other good review resources? With the forthcoming changes in LastPass’s Free Tier, it just has me thinking about alternatives. I don’t mind paying for software, but the idea of supporting an open source product versus an equity firm is appealing. I upgraded for a year since they were throwing a discount, but it’s been a long time since I’ve looked at alternatives so I figured this is a good time to at least look around.

---

<div class="post-metadata">

**Author:** ![JamesC\_HTAssets](https://sea2.discourse-cdn.com/flex020/user_avatar/www.twit.community/jamesc_htassets/32/3831_2.png) [@JamesC\_HTAssets](https://www.twit.community/u/JamesC_HTAssets)\
**Post date:** [February 20, 2021, 11:27am UTC](https://www.twit.community/t/bitwarden-security-review/9395/2 "2021-02-20T11:27:53Z")

</div>

Everyone is talking about it in the topic below, other than that I’m not sure if there are any security now reviews.

> [@LastPass Free Tier Getting Wacked](https://www.twit.community/t/lastpass-free-tier-getting-wacked/9374):
>
> LastPass is putting limits on the free tier, so now might be a good time to look at alternatives. I have been happy with BitWarden, but I do pay $1 a month because I want to support them, and for a family plan so my wife can access passwords in an emergancy. So I can’t honestly comment on their free version.

---

<div class="post-metadata">

**Author:** ![alexhoward](https://sea2.discourse-cdn.com/flex020/user_avatar/www.twit.community/alexhoward/32/143_2.png) [@alexhoward](https://www.twit.community/u/alexhoward)\
**Post date:** [February 20, 2021, 5:12pm UTC](https://www.twit.community/t/bitwarden-security-review/9395/3 "2021-02-20T17:12:52Z")

</div>

Thanks. I saw that. Steve’s review and endorsement of LastPass is what sealed the deal for me when I first started using so I just wondered if Steve had done any similar security review of BitWarden, especially since it’s opensource.

---

<div class="post-metadata">

**Author:** ![JamesC\_HTAssets](https://sea2.discourse-cdn.com/flex020/user_avatar/www.twit.community/jamesc_htassets/32/3831_2.png) [@JamesC\_HTAssets](https://www.twit.community/u/JamesC_HTAssets)\
**Post date:** [February 20, 2021, 5:46pm UTC](https://www.twit.community/t/bitwarden-security-review/9395/4 "2021-02-20T17:46:16Z")

</div>

Yeah I figured you probably saw it but figured I would throw it out there just incase. Hopefully someone else will come along with the info you were looking for.

---

<div class="post-metadata">

**Author:** ![uteck](https://sea2.discourse-cdn.com/flex020/user_avatar/www.twit.community/uteck/32/901_2.png) [@uteck](https://www.twit.community/u/uteck)\
**Post date:** [February 21, 2021, 10:07pm UTC](https://www.twit.community/t/bitwarden-security-review/9395/5 "2021-02-21T22:07:59Z")

</div>

I think I heard about it on Floss Weekly, but can’t find the episode, but I found this clip from Leo talking about it. [Password Managers - YouTube](https://www.youtube.com/watch?v=erG-Cj8orE4)

---

<div class="post-metadata">

**Author:** ![uteck](https://sea2.discourse-cdn.com/flex020/user_avatar/www.twit.community/uteck/32/901_2.png) [@uteck](https://www.twit.community/u/uteck)\
**Post date:** [February 22, 2021, 7:24pm UTC](https://www.twit.community/t/bitwarden-security-review/9395/6 "2021-02-22T19:24:36Z")

</div>

@ant_pruitt found the link; [FLOSS 615: OBS.Ninja](https://www.twit.community/t/floss-615-obs-ninja/9273)

---

<div class="post-metadata">

**Author:** ![Boffin](https://sea2.discourse-cdn.com/flex020/user_avatar/www.twit.community/boffin/32/2071_2.png) [@Boffin](https://www.twit.community/u/Boffin)\
**Post date:** [July 6, 2021, 4:35pm UTC](https://www.twit.community/t/bitwarden-security-review/9395/7 "2021-07-06T16:35:19Z")

</div>

Now that bitwarden is advertising on Security Now, I too would really like a security audit from Steve on the software.

---

<div class="post-metadata">

**Author:** ![uteck](https://sea2.discourse-cdn.com/flex020/user_avatar/www.twit.community/uteck/32/901_2.png) [@uteck](https://www.twit.community/u/uteck)\
**Post date:** [July 8, 2021, 2:22pm UTC](https://www.twit.community/t/bitwarden-security-review/9395/8 "2021-07-08T14:22:55Z")

</div>

Not sure if Steve needs to do that since there have been 2 other code reviews and a penetration test.

> **[Bitwarden 2020 Security Audit is Complete](https://bitwarden.com/blog/post/bitwarden-network-security-assessment-2020/)**
>
> We are pleased to announce that Bitwarden has completed a thorough security assessment and penetration test by auditing firm Insight Risk Consulting. Read our executive summary and download the full 2020 Assessment Report to learn more.

And they have a HackerOne bug bounty, [HackerOne](https://hackerone.com/bitwarden/hacktivity?type=team)
