Post by @mcc@mastodon.social

2026-02-21 22:12 UTC

My understanding is that Bitwarden and KeePassXC, the two open source password managers, are *both* using random code generators at this point, which is terrifying as those are the exact tools where a small error could have the largest negative impact, and also tools that once you've committed to using it you can't quickly back out if they enter a code quality decline https://github.com/bitwarden/clients/tree/main/.claude

Replies (9)

@glyph@mastodon.social 2026-02-21 22:16

@mcc@mastodon.social the double (triple?) entendre of "random code generator" here is really upsetting

Open ##2424998
@ireneista@adhd.irenes.space 2026-02-21 22:16

@mcc@mastodon.social yeah. shit.

Open ##2425003
@itamarst@hachyderm.io 2026-02-21 22:20

@mcc@mastodon.social 1Password says "We want team members at all levels to take the approach of actively learning AI best practices, identifying opportunities to apply AI in meaningful ways, and driving innovative solutions in their daily work. Embracing the future of AI isn't just encouraged at 1Password—it's an essential part of how we will be successful at 1Password." Pretty upset about KeepassXC on a personal level.

Open ##2425004
@jcnotwit@mastodon.social 2026-02-21 22:24

@mcc@mastodon.social Yeah, KeePassXC going this route really hurt. I'm probably going to migrate back to a text file encrypted with gnupg for basic password management, but I have no idea what I'm going to use for one-time passcodes.

Open ##2425016
@greyduck@wellduck.me 2026-02-21 22:29

@mcc@mastodon.social I admit I don't know the KeePass ecosystem terribly well, but does this go "up the chain" to regular KeePass 2.x or is it just XC?

Open ##2425026
@gsprs@mastodon.social 2026-02-22 13:48

@mcc@mastodon.social Both KeePassXC and Bitwarden support exporting their databases to other password managers, how is that not a way to “quickly back out” from them? It’s not like there’s a vendor lock-in, moving from them to another password manager takes minutes at most.

Open ##5221403
@CodingPhysicist@mstdn.social 2026-02-22 10:18

@mcc@mastodon.social Oh come on for fucks sake. I just migrated from KeepasXC to Vaultwarden/Bitwarden be außer of this shit. Passwordstore is great but the client and browser integration sucks. So now what?

Open ##5221409
@mcc@mastodon.social 2026-02-21 22:33

RE: https://wellduck.me/@greyduck/116110983001607000 I would like the answer to this question as well.

Open ##5221436
@08956495@infosec.exchange 2026-02-24 20:26

@mcc@mastodon.social this is not great news, i hope is only XC and the OG keepass version is vibe code free

Open ##5221444