14 Dec 2020

Steam and Battle.net prefer that their customers use their proprietary authentication apps, specifically Steam Guard and Battle.net Authenticator, respectively. Those apps use industry standard specifications, but with certain parameters to make them look like they are not compatible with other authentication apps, such as BitWarden.
Bitwarden, the open source password manager, makes it easy to generate and store unique passwords for any browser or device. Create your free account on the platform with end-to-end encryption and flexible integration options for you or your business.
They’re more powerful than simple web apps, however. Electron applications can access your file system and other local system resources. Many CEF apps are native applications that embed a Chromium browser. For example, Steam embeds a browser to display the store and community interfaces. Electron apps are also cross-platform, like Chromium.

Bitwarden is unquestionably one of the best password managers available for Linux. It’s also a cross-platform solution — so you can use it almost anywhere you like. You can also read our review of Bitwarden if you want to explore more about it. Using this you can retrieve SteamGuard TOTP codes inside Bitwarden without a rooted Android device or SteamDesktopAuthenticator. To use it you have to enter 'steam' into the TOTP textbox, then a 'Sign in with Steam' button appears and you are promted into a dialog that manages the rest.

It’s 2020. If you aren’t using a password manager yet, drop everything you’re doing and switch to one.

Using password managers is a very good idea. Up until last year, I was using Chrome’s password manager, and it worked well, for the most part. However, I wanted something more dedicated, since I had started to see obvious issues with it (no concept of “master” password, no special characters in password generators, no cross platform support, etc.). I searched around for password managers, and most reviews recommended options like Dashlane, 1password, Lastpass, etc. Figuring that there wouldn’t be much difference between these options, I decided to give Dashlane a try. After all, everyone did say “you can’t go wrong with any of these”. Boy, was I wrong.

The more I used Dashlane, the more puzzled I became at some of the design decisions the company chose to make. I ran into some bugs that are not only deal breakers, but are outright security issues. Since I had paid for a year of Dashlane’s premium subscription, I decided to give it a chance anyway. After having none of those issues go away after 11 months, I decided to just give up and switch to Bitwarden yesterday. In a couple of hours, all my issues magically went away. Here are my gripes with Dashlane:

Dashlane’s Autofill feature

Bitwarden Mail Not Enabled

One of the things that annoyed me the most with Dashlane was the “auto login” feature. If you’re on a website’s login page and Dashlane has only one login for that, it’ll simply fill the credentials in, and then click the submit buttom for you. The first time it happened to me I was so confused I had no idea what happened. This is just straight up no-no in my books. Software should never do things for you unless you specifically configure it to do that. It should merely suggest and serve helpful suggestions, never do actions on your behalf. Not only that, but:

You can’t click the “Remember me” checkbox or interact with the page in any way.
Some sites have a login page on their home screen, and this feature just makes you jump directly without even asking if you want to log in in the first place.
There’s no global switch to turn off this feature. You literally have to open each password item in the Dashlane app and turn it off. Needless to say, for hundreds of passwords, this feasible at all.

Bitwarden Authy

Broken Popups

Dashlane’s password fill in popup would just randomly not appear sometimes, both in the extension, and on my Android device, requiring me to open the app and manually copy the password from there. Besides being annoying, this is a very serious security concern, since the only time the password fill in pop up should not appear is when you’re on a phishing site.

I even got phished because of this once. Someone messaged me an invite to their Steam account, but the URL was staemcommunity.us (Notice the ‘a’ and ‘e’ flipped. Also, Steam doesn’t have a .us domain, but it looked official enough for me in that moment). The page was a 1:1 replica of the steam page, and Dashlane refused to show the password popup. Rolling my eyes, I opened the dashlane app, copied my username and password and even submitted the form. Thankfully, the minute I submitted it I realized something was wrong (the page told me that my username/password combo was incorrect, which it couldn’t possibly be), and I figured out I was phished, and changed my credentials quickly. This would have never happened had Dashlane’s popup been more reliable for me.

No Desktop App support for Linux

Bitwarden Otp

I solely use Pop!OS for everything, including gaming. Imagine my disppointment when I found that Dashlane’s desktop app only supports Windows and Mac. Without the app, you can’t use Dashlane’s VPN (why would you pay for premium then?). You also can’t use features like password export.

Bitwarden Steam Totp

To shift to Bitwarden, I literally had to download Windows 10, create a virtual machine, install the app, then use the export feature. Why doesn’t the web app have such a basic utility feature?

PowerDirector 18 Ultra + PhotoDirector 11 Ultra A Value-Packed Video & Photo Editing Combo There’s never been a better time to explore your creativity through photo and video editing and produce amazing results, without the steep learning curve of professional editing products. All in one value-priced package. Shop Cyberlink PowerDirector 18 Ultra + PhotoDirector 11 Ultra Windows at Best Buy. Find low everyday prices and buy online for delivery or in-store pick-up. Price Match Guarantee. CyberLink 's packaged combo of PowerDirector 18 Ultra and PhotoDirector 11 Ultra provides you with virtually all the prosumer tools you could want for video and photo editing.

No ability to lock extension on sleep

Whenever I lock/put my device to sleep, I want to extension to lock itself too, otherwise there really isn’t any point to having a master password. Dashlane has no such feature. Anyone who can someone get in my machine also suddenly has access to all my passwords. Bitwarden, a free service, has that feature.

Broken Password Export

Thankfully, Dashlane offers to export all your stored information in a JSON so you can shift to some other (read: better) password manager. However, after migrating to Bitwarden, I noticed that it wasn’t working well with subdomains. My first instinct was to blame Bitwarden, but upon inspecting the JSON export of my information, I found out that Dashlane had grouped together passwords for all subdomains into the domain. Driver intel nuc5cpyh. For example, the passwords for abc.example.com and pqr.example.com were stored in the JSON as 2 different passwords for example.com. Morever, none of my “Secure Notes” had made it in the export. I’m going to have to manually spend some time to clean up this mess.

Conclusion

Authenticator Key Totp Bitwarden

Just use Bitwarden. It’s free, and the premium plan is 1/5th the price of Dashlane, and it is much more usable and has more features than Dashlane.

This page uses Disqus for comments which uses Javascript. Please enable if you wish to participate!