February 2023 Spotlight: Bitwarden adds multifactor encryption

Coming in Spring 2023, the new Bitwarden Secrets Manager delivers a simpler, easier way for developers, devops, and cybersecurity teams to secure and manage secrets at scale. The beta offering will include easy onboarding and deployment, centralized management of developer and infrastructure secrets, and powerful, open source security with end-to-end encryption. Sign up to

A strong master password provides the first and most important level of protection to safeguard your vault data. Beyond this, Bitwarden adds additional layers of encryption and protection – called multifactor encryption – when your vault syncs with the Bitwarden cloud. Learn how

In the latest release, Bitwarden extended the Log in with device capability to let you log in without using your master password in your browser extensions, desktop app, and more. Learn how

There are a variety of vault entry options that come out of box with your Bitwarden account such as Name, Username, Password, Authenticator Key, URL, and more. But let’s say you need to add an entry that’s unique, such as an SSH key or custom fields to auto-populate web forms. Bitwarden makes this easy with the ability to create custom fields. Follow the simple

In the latest February release, Bitwarden built a series of updates to improve usability for organization administrators and owners. Improvements were made to the Vault page, the Members Page, and the Groups page to make navigating and managing your Bitwarden organization faster and easier. New columns were added to each of them to show listed items’ attributes at a glance. Read the article to learn more about

For those vault items that need serious care, some users might opt to go the peppering route to give them an added layer of security. Peppering involves adding or subtracting a string of characters to a password entry that isn't part of the password but is known only by you. Although peppering is a very simple idea to implement, it does have a few implications that you must take into consideration. Learn more about the

With cybercrime on the rise, institutions invent new and creative ways to strengthen account authentication, such as prompting users to enter specific password characters upon logging in. In this example, if your password is b!tw@ard3nr0k$, your bank may prompt you to enter the 2nd, 8th, 10th, and 13th characters of your password which would be !, t, r, and $. While this may make it harder to crack, it undoubtedly adds friction to the user login experience. Fortunately, Bitwarden now offers an easy way for users to quickly identify

As an open-source project, the global

Big thank you to community member,

1. Thank you @frikeer for

   sharing
   your approach to auto-pasting TOTP codes.

   

2. Thank you @jvh@twit.social for

   commenting
   on how you simplify two-factor authentication with Bitwarden.

   

   
   

• Weekly Live Demo
  :  Every Wednesday at 12 pm EDT

• Hacker’s Guide to VIP Security
  : 3/9 at 12 pm EDT

• Managed Service Provider (MSP) Demo
  : 3/16 at 12 pm EDT

• Managed Service Provider (MSP) Demo
  : 3/23 at 12 pm EDT

• Monthly Vault Hours
  :  3/31 at 12 pm EDT

That’s it for now. Let us know what you think about this newsletter including potential topics you’d like to see.

Until next time,

Team Bitwarden