Prior_Industry

The young republicans would double down.

So say for example that someone manages to get into a position (or the Bitwarden Devs) to alter the code for the Bitwarden Chrome extension that is then deployed from their update service to your device. You then login to your vault so the items on it are then readable. At that point your vault in theory would be compromised.

I just want to say, this was something I saw another user put up as a risk, so I don’t know if that’s actually feasible to achieve.

Even so, I still use Bitwarden. If you’re getting that deep into the weeds, unless you are writing all the code yourself or interrogating the code others put up before updating your system this sort of thing would always appear to be a risk.

The only concern I have seen written is if someone altered how the bitwarden client / extension itself works to expose / extract your vault. Not sure how feasible that would be.