Where is the account being created? about clients HOT 10 CLOSED

from clients.

@joshsleeper I'm pretty sure it is the common case.

from clients.

I will work on a help article about these items soon.

from clients.

Added the articles to this issue: bitwarden/help#2

from clients.

I am not sure I understand your question completely. The account is created on the server: https://github.com/bitwarden/core

from clients.

@paulkramme where ever you put it, clearly.

from clients.

I too am curious about this.

@jjshoe that makes it sound like users host their own bitwarden server, which I'm pretty sure isn't the common case (although it should be doable since all the source code is here...)

I think what @paulkramme is asking for is totally reasonable.
If I register an account with bitwarden, I'd love to know:

• Where is that account information stored? (Azure? AWS?)
• How is that account information stored? (hashed, salted, PBKDF2 iterations or likewise?)
• Does the bitwarden core server stay up to date with security patches and such?

Not accusing you of doing anything wrong @kspearrin, just so you know.
It's more the fact that I currently trust LastPass based on their documentation and how they've handled issues in the past.
While bitwarden seems super nifty (and has plenty of potential to be better than LastPass if it gets an OSS dev following), account management and storage is rarely easy and people often do it wrong.

I'd say it's even worth a more technical writeup on https://help.bitwarden.com/

from clients.

from clients.

Awesome @kspearrin, thanks so much!
bitwarden seems like a really great tool, keep up the great work!

from clients.

@joshsleeper @paulkramme These questions have now been answered and can be found here: https://help.bitwarden.com/security/

from clients.