But figuring out what to add on top of that is always either directed at businesses or families, or things I don't care about like 2FA or an authenticator. As per the security firm, Bitwarden learned about the issue in 2018, but it still chooses to allow it to be with trusted websites that use an iframe.

It's a weird spot for sure, I feel like table-stakes for a free password product is infinite devices + usable browser extension + phone apps + password generation. Moving on, the Bitwarden autofill feature holds a dangerous behavior that could allow malicious iframe planted in trusted websites to steal users’ credentials and send them to the attacker. It's frustrating, though, that I don't feel like the paid plans really give me anything useful, so I'd be paying basically just to support the product (which I'm happy to do!). This is something the Bitwarden team is actively working on but need your help as a community and active Bitwarden users When you have autofill configured and get to a page where you have saved credentials within Bitwarden, and your browser extension is unlocked, the credentials should be automatically populated. * Button locations aren't consistent between search view and opening it on a site you have a password onĭefinitely still the best for me though. * Launching sites without mouse isn't possible (shortcut exists to open extension but can't select site to launch it using arrow keys, for instance) * Not as good about determining correct sign-in URL and lots of times will send me through the auth redirect from registration

The chrome extension leaves a tiny bit to be desired, but definitely still usable: I moved to Bitwarden from Lastpass also, and I'm definitely happy for the most part.

Bitwarden autofill windows