


Bitwarden was audited in 2020 by a third party to ensure that it's secure.īitwarden also has an option to import that LastPass export CSV file you saved-and your form-fills CSV file too, if you used that feature. In theory, the more eyes on the code, the more airtight it becomes. There are two other plans: a premium option ($10 per year) with support for Yubikey and other extras, and a Family Plan that includes support for up to six users ($40 per year).īitwarden is open source, which means the code that powers Bitwarden is freely available for anyone to inspect, search for flaws, and fix. Bitwarden is free with no limits, and it's every bit as polished and user-friendly as competitors. For example, the Location category as it stands could mean your location down to the last two feet, while I might be willing to buy some apps if the only location data they obtained from me was my "country".If you want to stick with a free service, I suggest Bitwarden. I wish Apple had broken down some of its data categories. Why did the article not include "user content" when it listed " users location, usage data, contact info, and some user content"? And why did it insert the word "some" before "user content" when that word isn't in the App Privacy label? The App Privacy panel includes "Location" which is extremely specific and is nearly the same thing as "personal identifiable user data" especially when it can be cross referenced with other data, which is probably an easy thing for companies like Facebook to do. If that doesn't mean "personally identifiable user data", then what does?Ģ. The App Privacy panel actually says "Identifiers". The article quotes LastPass as saying "no personally identifiable user data or password activity is passed through the trackers" yet I see a few reasons to disbelieve that:ġ. Specifically, the LastPass iOS app tracks users location, usage data, contact info, and some user content, which all could be collated and sold to advertisers who then could use the information to target users with ads.Ī LastPass spokesperson acknowledged to The Register that while the trackers exist, no personally identifiable user data or password activity is passed through the trackers. A security researcher has detailed seven trackers inside popular password manager LastPass, that the company itself or other advertisers can utilize to create targeted ads for users of the app.
