Bitwarden doesn't encrypt field names, just the field contents, that means you can gleam some info on what data is stored. The vault structure of 1Password reveals less metadata.

I use this for my family and for the life of me it's hard to teach some folks to use complex passwords that aren't silly like dog$name1234 (This is like peak password for some folks. The secret key protects users who have issues with complex master passwords. I ended up choosing 1Password and so did my friend for the following reasons:

My friend also did the same.īoth are good products with their pros and cons. I feel like it's mostly a feature to protect people with weak passwords in case of a database breach, and in that sense it is useful, but it doesn't make much difference if you already have a strong password. I'd much prefer to have a strong password than the hassle of having to keep the secret key safe and secret. For example, a 6-word passphrase is unbreakable for the foreseeable future. Tbh, I never liked that feature because it's advertised as a security feature, but that's true in practice only if your password is weak, in which case the secret key doesn't always protect you.īut it's perfectly doable to have an unbreakable password without it being ridiculously long.

It's a difference between 'impossible' and 'even more impossible'. With a strong master password, this is not a difference between 'not easy' and 'almost impossible'.

This is not easy, if you have a good master password, though 1Password makes it almost impossible. In that respect, Bitwarden is similar to LastPass in that if the vaults are stolen, the hacker only needs to brute force your password to access your vaults.

Reddit 1password vs bitwarden