Warning - Brave Update Wiped Out All of My Passwords

I do have recent backups of my passwords, so I’m O.K.

Just a heads up…

Don’t know if this is just this computer and a fluke or happening generally.

I don’t save my passwords in the browser. I have Bitwarden and they’re saved there. Also, installed through Flatpak or through the AUR?

1 Like

It’s better to use a real password manager for storing your passwords than using the save password functionality in a browser. Have you had a look at something like Bitwarden?

3 Likes

Never thought about it, but I’ll check it out.

Looking on both aur and arch repositories, most of the bitwarden versions are in red which I think means they’re no longer supported.

There is a Rust based clone called vaultwarden though.

I use bitwarden the browser addon.

There is an Bitwarden extension in the Chrome Webstore as well.

1 Like

Yeah, just checked it out, but a couple of recent complaints, it’s not autofilling the password over the last few days. Looks like for some people, it might be currently somewhat broken. At least for the Brave extension…

Copy the password or wait for it to load and give you a prompt. It does for me. I also heard that autofilling can be exploited by a malicious actor to steal info, but I don’t know about that.

Since I haven’t loaded this thing yet, not sure when you say ‘copy’ the password, I’m not sure where I’m copying it from. Sounds cumbersome if I have to run through menu’s to find the password it’s supposed to supply. I hate installing and uninstalling software, so I tend to avoid things that sound problematic.

Expect, you only click two buttons by default to enter in Bitwarden, one on the extensions button next to the URL bar and other on the extension itself, and you can even reduce that to one click since you can pin extensions next to the URL bar, you enter your master password and it auto-detects the website 99% of the time and you’re done. I installed Brave just to check that. Alongside that, on Firefox at least, this happens when Bitwarden detects a login prompt.

I’m sorry, but I don’t see what you’re talking about at all.

You are saying I have to enter a master password every time I go to a password-protected site? Or just when I first wake the computer browser up?

You enter your master password when you want to access Bitwarden on the browser and you haven’t entered it until then. By default, Bitwarden locks the vault on browser restart for security reasons. You can disable this behavior if you really want, but I don’t find it annoying because I don’t need to enter a password or a secure note or what have you from the manager every single day. The “remember me” function is pretty useful and mostly safe.

I assume the password vault is stored locally, and not out in the cloud somewhere?

Stored in the cloud. They are open source, tho, so you can self host it if you want that. Alongside this, you can export the vault as a .json or a .csv file.

I don’t know. Sounds like a lot of extra steps. Not crazy about my passwords in the cloud, don’t know what modifications I would need to run locally, I’m not a programmer.

Probably take a pass on this, but thanks for the suggestion…

KeePassXC is an excellent local password manager. It’s in the official repo.

https://archlinux.org/packages/extra/x86_64/keepassxc/

3 Likes

Im running keepass on my pc syncronize it locally with syncthing onto my pixel7a running graphene on. Nothing better!

1 Like

I don’t use Brave because of this policy, but I don’t store passwords in browsers or the cloud to Sites that have any of my personal info.

There are other ways to store passwords other than online like a password manager on USB, encrypted removable drive, etc.

It seems to be disabled by default, so this is a conscious decision to enable. I can, however, understand if you want to stay clear of it. I frankly see no issue with providing this feature for the individuals that wanted, though, I do wish Brave would separate these Web3 bollocks from the main browser and make an extension of some kind to add them back or something like this.