Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


Forums › Desktop computing › Password Storage services
hsvhel

1273 posts

Uber Geek
+1 received by user: 596

ID Verified

#302539 30-Nov-2022 11:13
Send private message

Team

 

This sort of service is not my area, looking for some feedback on bitwarden (or similar) 

 

Have had a request from a friend as to what application is nice and secure (as far as they can be) whilst being budget conscious for annual pricing.

 

Request was on Bitwarden, happy to look elsewhere

 

They all have glowing home pages on how good....... 




Referral Link Quic

 

Free Setup use R502152EQH6OK on check out

 

 

View this topic in a long page with up to 500 replies per page Create new topic

This is a filtered page: currently showing replies marked as answers. Click here to see full discussion.

michaelmurfy
meow
13580 posts

Uber Geek
+1 received by user: 10910

Moderator
ID Verified
Trusted
Lifetime subscriber

  #3027684 26-Jan-2023 21:27
Send private message

OWASP just changed their recommendation for PBKDF2 work factors (iterations) to 600,000 (thanks to LastPass).

 

So, LastPass posted that their iteration count was set to 100,100: https://support.lastpass.com/help/about-password-iterations-lp030027 but, this turned out to be false with many customers reporting they were set to as low as 1 iteration but the most common iteration counts were 500 & 5000. Customers were not upgraded automatically meaning their vaults could be brute forced easily.

 

Bitwarden's older customers were set to 100,001 but in response to the recommendation from OWASP newer accounts are set to 350,000 iterations. They're still considering upgrading existing customers but you can do this yourself in your web vault under Security --> Keys (I upgraded mine to 350,000 as I found 600,000 was actually quite slow) - https://fosstodon.org/@bitwarden/109733968664841286

 

I encourage everyone using Bitwarden to up their security by setting your KDF iterations to 350,000.




Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

View this topic in a long page with up to 500 replies per page Create new topic








Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Updates »

Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.








RSS feeds
Main feed
Forums feed
Copyright
©2002-2026 Geekzone®
Site features
Geekzone BI dashboard
Geekzone Badges
Geekzone Status Page

 

Site Information
Subscribe to Geekzone
Privacy Statement
Forum Usage Guidelines (FUG)
Advertising
Trademark and copyright