Comment on Major password managers can leak logins in clickjacking attacks

FailBetter@crust.piefed.social ⁨6⁩ ⁨days⁩ ago

• leo@lemmy.linuxuserspace.show ⁨6⁩ ⁨days⁩ ago

  The easy-ish way is to use the desktop app, but from the article:

  However, Bitwarden told BleepingComputer that the issues have been fixed in version 2025.8.0, rolling out this week.

  source

  • FailBetter@crust.piefed.social ⁨6⁩ ⁨days⁩ ago

    I have pretty unserious threat model, so hopefully bw team is trustworthy enough to believe in their upcoming fix.

    Many thanks Leo!

    source

    • Cris_Color@lemmy.world ⁨6⁩ ⁨days⁩ ago

      My understanding is that bitwarden is generally very well regarded by security knowledgable folks, with the most secure option being keepass synced manually, and seemingly bitwarden behind that (among popular choices)

      That is my impression as a fairly non-technical casual privacy/security pursuer anyway 🤷‍♂️ I’m also a Bitwarden user as it’s a better balance of practicality and security for my needs and usecase

      source
• DarrinBrunner@lemmy.world ⁨6⁩ ⁨days⁩ ago

  I just now did an update and Bitwarden updated. Linux Mint.

  source

  • FailBetter@crust.piefed.social ⁨6⁩ ⁨days⁩ ago

    Nice, good looking out😎

    source