Switched from LastPass to Bitwarden after the 2021 breach and never looked back

I used LastPass for 5 years across 3 devices. After their 2021 breach where they lost encrypted vaults and then dragged their feet on telling anyone, I moved everything to Bitwarden in one weekend. Bitwarden is open source, has a free tier that actually works, and I pay like $10 a year for premium. Has anyone else switched password managers after a big security incident?

3 comments

3 Comments

taylor.reese1mo ago

Honestly, moving everything in one weekend is the way to do it. I did the same thing after LastPass dropped the ball with that breach. The biggest pain point for me was changing all those stored passwords on different sites, but Bitwarden's import tool made it way easier than I expected. Plus, you can run a password health report in Bitwarden to flag weak or reused passwords, which is a game changer. Ngl, I set up two factor authentication on my vault right away too, just to sleep better at night. So yeah, you made the right call jumping ship when you did.

piper7791mo ago

The whole LastPass situation really made me realize how much we just trust companies with our stuff without thinking twice. It's the same pattern I see everywhere now, like how people keep using the same wifi password from 2015 on all their devices even after a router hack. People get comfortable with something and don't want to deal with the hassle of switching until they get burned. Bitwarden being open source is a huge deal because you can actually see what's happening under the hood instead of just hoping for the best. That whole "out of sight out of mind" mentality is exactly why breaches keep happening to the same companies over and over. It's like leaving your front door unlocked because nobody's broken in yet.

william_garcia1mo ago

That wifi password thing hit close to home man. My buddy Dan was still using "Fluffy2010" on his network even after he got hit with that Krack vulnerability thing a few years ago. He only changed it when his neighbor's kid literally walked into his apartment and asked if he could use the wifi because it showed up as open on his phone. Dan didn't even realize the router got reset during a power surge and defaulted to no password at all.