I have been looking for an exit strategy from 1password ever since they began the move to a forced migration to cloud based only.

other than that, I see bitwarden as a real great upgrade because of many features I really like. I just migrated from 1password to bitwarden a week ago, and am loving it! except the need for real browser extension integration. This is really annoying in my opinion, that you waste your time with putting in your password each time you start your browser Look you guys recommend a long master password, but a long master password takes a long time to enter. RSA encrypted communication, only provide the random generated key once and delete it after retriveal

It can decrypt the keychainkey and unlock the keychain. Now the extension got the RK2 and has locally stored the keychainkey encrypted with RK2. The Desktop App can safely provide it, because it knows that nobody can do something with the key unless he has the Encryped version as the Extension does. Now you start Chrome and the extension asks the Desktop App for an unlock key. you start the Desktop App you unlock the keychain and RK2 gets accessible. The Random Keys RK1 and RK2 can be stored in the keychain, because they are needed to unlock the other. So it looks like this:Įxtension (Random Key from Desktop App (RK1), Encryped keychainkey with RK2)ĭesktop App (Random Key from Extension (RK2), Encryped keychainkey with RK1) Than they exchange the random generated keys and forget them. They can safely store it next to the keychain. When extension and desktop app first connect to each other, each of them are unlocked and have the current keychain key in memory right? Now both of them generate a random key and encrypt the current keychain key.

Keepassxc chrome extension