Bitwarden
by Bitwarden Inc.
A secure and free password manager for all of your devices
About
Bitwarden is the easiest and safest way to store all of your logins and passwords while conveniently keeping them synced between all of your devices.
Password theft is a serious problem. The websites and apps that you use are under attack every day. Security breaches occur and your passwords are stolen. When you reuse the same passwords across apps and websites hackers can easily access your email, bank, and other important accounts.
Security experts recommend that you use a different, randomly generated password for every account that you create. But how do you manage all those passwords? Bitwarden makes it easy for you to create, store, and access your passwords.
Bitwarden stores all of your logins in an encrypted vault that syncs across all of your devices. Since it's fully encrypted before it ever leaves your device, only you have access to your data. Not even the team at Bitwarden can read your data, even if we wanted to. Your data is sealed with AES-256 bit encryption, salted hashing, and PBKDF2 SHA-256.
Bitwarden is 100% open source software. The source code for Bitwarden is hosted on GitHub and everyone is free to review, audit, and contribute to the Bitwarden codebase.
Permissions
5 permissions weaken the sandbox. Flatsonar asks before installing.
- all devices (/dev): webcams, disks, raw hardware
--device=all - X11 display: X11 lets apps read input and windows of other apps
--socket=x11 - your keyring / saved passwords
--talk-name=org.freedesktop.secrets - session management (logout, suspend)
--system-talk-name=org.freedesktop.login1 - authorisation (polkit)
--system-talk-name=org.freedesktop.PolicyKit1 - inter-process communication (needed for X11)
--share=ipc - network
--share=network - Wayland display
--socket=wayland - GPU acceleration
--device=dri - access to ~/.var/app/com.google.Chrome/config/google-chrome/NativeMessagingHosts
--filesystem=~/.var/app/com.google.Chrome/config/google-chrome/NativeMessagingHosts - access to xdg-config/chromium/NativeMessagingHosts
--filesystem=xdg-config/chromium/NativeMessagingHosts - access to ~/.var/app/com.microsoft.Edge/config/microsoft-edge/NativeMessagingHosts
--filesystem=~/.var/app/com.microsoft.Edge/config/microsoft-edge/NativeMessagingHosts - access to ~/.var/app/org.chromium.Chromium/config/chromium/NativeMessagingHosts
--filesystem=~/.var/app/org.chromium.Chromium/config/chromium/NativeMessagingHosts - access to your download folder
--filesystem=xdg-download - access to xdg-config/google-chrome/NativeMessagingHosts
--filesystem=xdg-config/google-chrome/NativeMessagingHosts - access to ~/.var/app/org.mozilla.firefox/.mozilla
--filesystem=~/.var/app/org.mozilla.firefox/.mozilla - access to xdg-config/microsoft-edge/NativeMessagingHosts
--filesystem=xdg-config/microsoft-edge/NativeMessagingHosts - access to ~/.mozilla
--filesystem=~/.mozilla - system tray
--talk-name=org.kde.StatusNotifierWatcher - notifications
--talk-name=org.freedesktop.Notifications - talks to com.canonical.AppMenu.Registrar
--talk-name=com.canonical.AppMenu.Registrar - screensaver inhibit
--talk-name=org.freedesktop.ScreenSaver - talks to org.gnome.ScreenSaver
--talk-name=org.gnome.ScreenSaver
Who publishes this
The creator demonstrably controls this app id: Flathub verification, the hosting account owns the namespace, or a well-known file on their domain.
- verified on Flathub: the developer proved they control this app id
publisher:flathub
Maintenance
Recent activity on the upstream repository, or built and reviewed by Flathub.
No staleness signals: recent activity, or built and reviewed by Flathub.