Printed model replace in app shops – Notices

Hello everybody!

Starting within the subsequent launch, the Bitwarden apps printed to the assorted shops would be the commercially licensed builds. No motion is required, and the apps will work precisely as they do right this moment.

• Bitwarden stays dedicated to open supply safety and transparency
• The GPLv3 OSS licensed model continues to be up to date and printed on GitHub
• All present options can be found in each variations
• License particulars are on GitHub
• Bitwarden stays dedicated to a strong, free perpetually plan for everybody

If you’ve gotten any questions, please ask them on this thread. Thanks all!

EDIT:
You can nonetheless learn, audit, and contribute to the codebase on GitHub, and that isn’t altering. The apps we launch are constructed from the code in these repositories.

• Bitwarden will not be going closed-source
• You can nonetheless fork Bitwarden
• No change to self-hosting, the licensing change impacts those that are repackaging and reselling Bitwarden
• The free plan is right here to remain completely

Will the Portable Desktop App link on Bitwarden’s Download Page obtain a construct that’s commercially licensed or OSS licensed?

What variations will exist between the 2 parallel variations?

Some future elements will likely be printed underneath the industrial license and can exist solely in that construct. Newly developed options will likely be evaluated on a case-by-case foundation for which license applies to them.

That’s an awesome query. I’ll work to get that data.

Edit: The obtain web page may even direct hyperlink to the industrial license.

Ahhh, so the phrase “present” is performing some heavy lifting within the following assertion:

But will the brand new options (these excluded from the GPLv3 OSS licensed builds) nonetheless be open supply?

@RyanL Given that there are already many options which can be solely unlocked for Premium subscriptions, will there now be as much as 4 ranges of performance (as proven within the desk under), and in that case, will there be as much as 4 totally different pricing tiers (together with no less than one “Free” choice)?

Direct downloads from the Download the Bitwarden Password Manager App for iPhone, Android, Chrome, Safari, and More | Bitwarden web page may even be underneath the industrial license.

Yes, Bitwarden continues growth of open supply code underneath GPLv3. Code underneath the industrial license is simply as viewable and clear on GitHub. This licensing mannequin supplies further authorized safety for choose options.

This considerations me fairly a bit tbh. It appears like the usual: Open Source → Semi Opensource → Open Source discontinued Rugpull fairly a number of corporations have been doing recently. I particularly acquired hit by this with MinIO, so I’m fairly cautious what I exploit now as a result of MinIO has been an enormous ache and switching from Bitwarden could be too.

I each pay for Bitwarden (though I don’t use any premium options. I acquired it to assist Bitwarden so it might proceed being an open supply venture. With the value improve I used to be already contemplating cancelling as I don’t use the premium stuff and with this it offers me much more motive to take action) however I even have Vaultwarden cases self-hosted for varied initiatives to work in groups. Both are important to me and I would like each to work equally effectively. I at the moment neither plan to modify my private Bitwarden to self hosted nor would I ever take into account shifting my self hosted cases to your servers.

So my questions are:

• Are there any new options coming to the OSS model, or is it staying as is with the whole lot new being within the industrial model?
• What would I lose out on by not utilizing the industrial model now or sooner or later?
• How are you guaranteeing that self-hosting will stay easy and can it stay doable for third-party groups like Vaultwarden to proceed to make use of the protocol?
• What model does the Linux Flatpak retailer obtain? Will it stay the open supply model or the industrial one?
• Will e.g. a industrial browser addon stay suitable with a open supply shopper? (E.g. With the biometric thingy?)
• How are you guaranteeing to us that such a Rugpull is not going to occur now or sooner or later?

In any case Bitwarden will now be placed on the record of issues I might want to watch its growth extra carefully in case this goes south.

Edit: I simply noticed within the feedback that it was famous that it is going to be selected case by case foundation on what will get developed. Thats good for now I assume, but the opposite questions stay open. (Ig it implicitly solutions another questions e.g. the self-hosting one too, however consider them extra in the long term)

While this may appear benign, Bitwarden could be effectively suggested to assessment intimately what occurred with the current Coinkite fiasco. The safety taking part in subject is principally equivalent and the extraordinarily actual (and dramatically realized) threat is principally equivalent.

In abstract: CoinKite ColdCard was additionally printed open software program however with out a FOSS license. This, in flip, eradicated any chance and motivation for the group to fork, audit, and assessment their software program. This, in flip, allowed a, frankly, idiotic bug to fester. This in flip led to customers’/prospects’ loss of some million {dollars} of worth to an virtually trivial exploit that may’t even be labeled as a correct hack. Besides insane worth loss, Coinkite is successfully lifeless as an enterprise and its rules doxed and can stay shunned the remainder of their lives (deservedly so; I by chance know one among them as a earlier work colleague — not a foul man, however that is deserved).

This is strictly the place Bitwarden is heading now.

This looks like an awesome motive for me to discontinue my Bitwarden subscription. Bitwarden is definitely the perfect platform on the market for password administration however that is the plain results of enterprise capital affect and attorneys.

What would maintain me subscribed as a person if I’ve the requirement that I have to be capable to self-host a platform to be able to maintain utilizing it (even when I’m not at the moment self-hosting, which I’m not)?

Hey @zfJames there is no such thing as a requirement to self-host and you may proceed utilizing the shoppers from the app storefronts as regular.

Thank you in your reply! I believe my query was worded confusingly.

My requirement for a password supervisor is: It should give me the choice to self host if I select to take action.

That is a safeguard in opposition to my passwords and information getting locked in a field that I can’t get out of. With this new license and coverage, it’s clear to me that Bitwarden now doesn’t meet my necessities. An unnamed record of “options” will now be developed fully aside from what I can host that will or might not find yourself being crucial for safety.

Can you affirm if that is appropriate?

That is inaccurate, there is no such thing as a change to the power to self-host with a Bitwarden subscription.

I see no signal but that vault export is getting eliminated. Quite the opposite, the Credential Exchange Protocol/Format (CXP/CXF) was added just lately to the cell apps.

Thank you for clarifying! That doesn’t change my unfavourable stance on this transformation however does assist make clear operation.

For your query on third-party group servers, there is no such thing as a change, they’ll proceed to decide on which options to assist and construct out on their server.

Not an awesome look, this appears quite a bit like openwashing. How can we belief that this isn’t step one in a rug pull out of FOSS?

Can you make clear if industrial license unique options will likely be accessible for self hosted customers? Are self hosted customers now second class residents?

@Wreckage no change to self-hosting. This solely impacts those that are repackaging and reselling Bitwarden.

@dwbit Could you please look into my unanswered query from above and see if some readability will be offered?

I perceive, however I fear extra concerning the future. Will all future options nonetheless be accessible for self hosters? Or ought to we anticipate that some future options is not going to be accessible for self hosters?

While I’ve been completely happy to be a paying subscriber, self internet hosting capabilities is essential to me as it’s my exit technique if one thing goes improper.