Hacker News new | past | comments | ask | show | jobs | submit login

Alternatively, https://padlock.io/ is useful.



Interestingly padlock-cloud is built on Go so it is likely to be much easier to deploy.


Author of Padlock here. Thanks for mentioning! Happy to answer any questions as to how Padlock compares to Bitwarden!


Thanks! Well, since I've got your attention, how does Padlock Compare to Bitwarden? Maybe you could point out some major differences in what works better in Padlock than in Bitwarden? What doest Bitwarden do better and how does Padlock plan to improve? (Although, this may not be the right forum for this...).


Yeah, maybe not the right forum to cover all of your questions in detail but here are a few bullet points (note: I cust came across bitwarden, too, so this is just from what I gathered from the website and the little time I've spent playing around with it):

Similarities:

- Open Source

- Cross Platform

- It appears to be possible to host your own server

Differences:

- As pointed out somewhere else, Bitwarden is very limited in what you can store. It seems to be primarily for storing website logins and does not offer any customisation options for storing other kinds of data. Padlock is much more flexible in that it allows you to add any number of fields to any given record.

- Apart from the mobile apps, the primary way to access your data seems to be the website served over https. This is a terrible idea for a ton of reasons and I could spent all day going into all of them but lets just say that there is simply no way to handle your data in a secure and private manner this way (either you have to do crypto client-side which is inherently insecure for a website served over the net or you have to do it server-side which means you have to send your master password to the server). By contrast the Padlock app, although based on web technologies (it's built with Polymer), is only available as a packaged (and code signed!) app for all platforms. This means that you can safely do client-side encryption without having to worry about the integrity of the source code. Padlock Cloud on the other hand is built on the principle of Zero-Knowledge, meaning no unencrypted sensitive data is ever sent to the server.

I could go on forever, but this will have to do for now. If you have any specific questions, let me know!




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: