Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

If you apply this test to things like LastPass or Bitwarden they fail too. And yet the don't keep my unencrypted passwords on their servers.


If you lose your Bitwarden master password you've lost your data. It passes the mud puddle test.


ah, you are right ... I missed the password recovery flow part which is a key thing here




Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: