Bitwarden flatpak safe?

[AverageDude]

Does anybody know whether the Bitwarden flatpak from the Linux mint software manager is safe (no phishing)? It seems to have many positive reviews but reviews can be faked.

I've looked up the developers of the flatpak and found this github page (https://github.com/flathub/com.bitwarde ... tributors/).

I know that alternatively one can install Bitwarden via AppImage, from Source or from the snap store. I don't really like these alternatives and whenever possible I'd like to install my applications directly from the linux mint software manager.

What are your thoughts on this?

Thanks!

[MikeNovember]

Hi,

On the flathub page about bitwarden https://www.flathub.org/apps/details/co ... en.desktop you can read:

Bitwarden is 100% open source software. The source code for Bitwarden is hosted on GitHub and everyone is free to review, audit, and contribute to the Bitwarden codebase.

This wrapper is not verified by, affiliated with, or supported by 8bit Solutions LLC.

This page gives you the list of contributors to flatpak version: https://github.com/flathub/com.bitwarde ... tributors/

Bitwarden is also available as an AppImage from Bitwarden.com https://bitwarden.com/download/. And if you click on "more desktop installation options" a new window opens, offering also deb, rpm and snap choices for Linux.

Now, do you trust flatpak developers team or Bitwarden? It is your choice.

(I generally prefer to download security products from their website. I would so choose deb or AppImage version from Bitwarden).

Regards,

MN

[AverageDude]

Maybe this is a noob question but shouldn't all the packages offered in linux mint software manager be safe and reviewed?

Furthermore the flathub admins also check their new packages before offering them for download right?

I've already used the flatpak Bitwarden because it seemed to work much smoother than the actual AppImage from Bitwarden itself. The deb package from Bitwarden doesn't auto update itself and whenever possible I try to avoid snaps.

Does that mean I have to reset all my passwords now? The github page looks valid to me but maybe I'm not looking detailed enough? It claims to be just a wrapper and as far as I can tell it is?

Thanks!

[MikeNovember]

Hi,

The github page looks valid to me but maybe I'm not looking detailed enough? It claims to be just a wrapper and as far as I can tell it is?

There is only one way: to review the code!

If you can't, you have to trust the developers. When I read this page, https://github.com/flathub/com.bitwarde ... tributors/, I see the following names:

- Ghisvail --> Ghisvail Anthony Valent, "Former research scientist turned software engineer, on a mission to improve tooling for medical research one project at a time" Paris, France.

- flathubbot --> flathub bot

- phloose --> Philipp Loose "web developer at @demvsystems" Hamburg, Germany

- Lctrs --> Lctrs (no more info)

- vchernin --> Vincent Chernin

- proletarius101 --> proletarius101 (no more info)

- Erick555 --> Erick555 (no more info)

- FHEK789 --> Felipe Kinoshita "My KDE's gitlab profile is way more interesting" Brazil

- TheEvilSkeleton --> TheEvilSkeleton "I'm a proprietary browser" Montréal, Québec

- TingPing --> Patrick TingPing "@GNOME developer, @flathub maintainer, @WebKit committer, and more!" USA.

Now you know the nicknames and some names of the developers, you can search the web about their reputation, then decide or not to use bitwarden flatpak version.

Regards,

MN