Bitwarden

1192 readers

1 users here now

Discuss the Paswordmanager Bitwarden.

founded 3 years ago

MODERATORS

wuffa@discuss.tchncs.de

Why does Bitwarden need access to my browser profiles and downloads directory suddenly? (sopuli.xyz)

submitted 1 week ago* (last edited 1 week ago) by passenger@sopuli.xyz to c/bitwarden@discuss.tchncs.de

10 comments fedilink hide all child comments

I am very confused by this update message I got from KDE Discover when updating my Fedora Linux.

Bitwarden wants new permissions:

Home folder access: Can read and write files in the following locations without asking for permission:

Below, it lists what look to be profile folders for chrome, edge, chromium, firefox and "mozilla".

In addition, it wants system folder access: some xdg-config paths for several browsers and the Downloads folder!

What is this?

I cannot find any explanation for this.

Going to uninstall anyways, no thanks.

Rather use the website then, until I setup my own VaultWarden, unless I figure out a good sync for KeePass.

top 10 comments

sorted by: hot top controversial new old

[–] somethingsomethingidk@lemmy.world 4 points 1 week ago

It looks like it's partially related to an issue the integration between the desktop app and browser extension.

This issue at least explains needing <browser_stuff>/NativeMessagingHosts

https://github.com/bitwarden/clients/issues/18996

Idk about the other stuff though

[–] DarrinBrunner@lemmy.world 4 points 1 week ago (1 children)

That is a very good question.

I switched to KeePass, I don't need to sync.

[–] passenger@sopuli.xyz 1 points 1 week ago (2 children)

I do use it but I need some kind of sync between android (grapheneos), windows and linux. This is what I have been using Bitwarden for. I guess it's time to self-host Vaultwarden. Or this termux-syncthing trick I hear about...

[–] BlueKey@fedia.io 2 points 1 week ago (1 children)

If you can selfhost, you might also consider an SFTP or WebDav server, as Keepass2Android supports these (and more) ways to sync the databasefile. For Linux (and Windows I think) there are applications like Free File Sync.

[–] passenger@sopuli.xyz 1 points 1 week ago (1 children)

Thanks! Sftp might be the way to go for me...

Can kp2a open several databases at once?

[–] BlueKey@fedia.io 1 points 1 week ago

I'm not sure, but I think no.

[–] hobwell@sh.itjust.works 1 points 1 week ago

I just setup syncthing for this. I’m only syncing on the local network, but I think it has options to reach across the net.

[–] eager_eagle@lemmy.world 4 points 1 week ago (1 children)

Open an issue or discussion in their repo.

[–] passenger@sopuli.xyz -1 points 1 week ago* (last edited 1 week ago)

Well, I just got rid of the app so that's that. And I don't have a github login at hand. If someone can open an issue, feel free. I would like some answers why they did this. Or is this because of flathub somehow?

[–] boatswain@infosec.pub -3 points 1 week ago

Why not just use SyncThing for syncing? It works well and is painless to set up.