this post was submitted on 12 Jun 2023
4 points (100.0% liked)

Bitwarden

771 readers
1 users here now

Discuss the Paswordmanager Bitwarden.

founded 1 year ago
MODERATORS
[email protected]
4
Biometric key is stored in Windows Credential Manager, accessible to other local unprivileged processes (hackerone.com)
submitted 1 year ago by [email protected] to c/[email protected]
1 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 1 points 1 year ago

This appears to be a problem with window's security model. Not only BW has this problem, 1P has this problem as well, and presumably other password managers that allow such convenience too. The only way is not to persist the encryption key/password/secret across app restart.

See