Bitwarden Premium Vs Free Account

hey guys today i wanted to talk to you about bit warden and the premium account versus the free account and whether or not the 10 a year is worth it to you to upgrade so let's get started [Applause] okay guys probably a question i see all the time about bit warden is whether or not it's worth upgrading for 10 a year to the premium account the free account is great it's got a lot of great features in it uh some people upgrade just for the sake of supporting such a great platform but if you're new to bit warden and you're kind of curious whether or not the premium is there and what those features actually mean then this is the video for you because we're going to go over some of those features and then you'll be able to see exactly what they do and whether or not it's worth it or if the free account does what you need it to do and you can just stay on the free account which is a great account there's nothing wrong with it i personally have the enterprise account because i work with a couple other colleagues that use it um so we have some of the kind of sharing features in there but today i'm mostly just going to be comparing the free account to the premium account comparing either the family account or the enterprise account um will be a different video but i'm going to touch on some of those topics today so with that let's get started okay guys here so let's just take a quick look at their website and uh just compare the plans we're just comparing the personal plans specifically the free versus the premium so we'll write right down into the details here so the big thing here um i'm just going to touch on the family just a bit i know i just didn't want to do the premium but the family one it's really about sharing uh your passwords with other users and they do that with collections so uh say my wife and i both had bit warden accounts and um you know i have my own passwords and she has her own passwords but if there's you know some family accounts like to the school or something like that that we wanted to share we would put that into a collection called school or kids or something like that and then um we would put uh that account shared to that collection and then anybody that's entitled to that collection would get it so uh that's not really what we're talking about today though we're talking about if you as an individual um if the free or the premium you know makes sense for you so that's why if you're looking at these users and why these two just say one it's just because it's not designed to share your passwords with anybody this is really just about you and the features for you as an individual user there'll be another video on more details about the family and the business plans so um if you're wondering what collections are that's what um that's what we're talking about when we talk about uh the shared accounts that's just to share your passwords so that's why in these two in the free or the premium you don't get them because it's just one user you're not sharing with anybody obviously you get access to all the bit word and account uh apps on all the account packages so that's your you know android iphone windows mac all of them there's no limitation you can install it on whatever you want um you get access to store you know as many identities or sorry items into that system as you want uh so your all your credit cards and usernames and passwords and all that stuff you can sync across your accounts shared items again that's only available in the family plan and then the secure password generator um it's available on all of them but i'm going to show you a kind of a neat nugget about password generator uh that i use every single day it's a pretty it's a pretty good life saver so um that's if you're using the free or the premium you're gonna get that tip today now obviously you get a little bit of space with the premium so you want to upload you know pictures um i use this a little bit if i want to take a copy of like maybe like a health card or or driver's license or something like that a photo of it and have that in my vault i can do that as well and um and so having a little bit of space there is great um so that that alone could be worth the ten dollars a year we're not talking a lot of money right you can see it's ten dollars us a year to upgrade so um it's a really great platform but i understand that might not be for everybody so that's what today's video is about you still get all the encryption especially if you want to export that's a relatively new feature if you want to export all your volt as an encrypted json put that on a usb key and put it in your save for something that's a nice new feature um premium features so this is this is the big one we're going to talk about this today your bit warden authentication your t-o-t-p this is about logging into other um systems so we're going to set up a lab and with twitter and i'm going to show you how you can do this but this essentially allows both your first factor and your second factor to be in bit warden i can already hear the comments blowing up about how insecure that is it's a really really great feature it's by far most of the premium people that i've talked to love that feature and we'll talk about that more and when you should consider using it not on a security side of things so just hold down the comments for a second until we get to there um and then your two factor logins so you get your basic two factor login on the free account you get a little bit more options on the premium account there is an ability to use the yubikey on the free account uh i have a video on that i'll link it below um and if you're new to bit word and i'd recommend checking out that video anyways because it'll basically walk you through how to make sure your bit an account your vault is set up really well and really secure so regardless you have free or premium check out that video if you're new to bit warden but just know that on the uh the premium side you get a little bit more features when it comes to um your two factor to log into vault um as for some of the other features so your vault out with your emergency access emergency text is a brand new feature to bit warden it's only a few months old obviously you get support both of them are cloud hosted or self-hosted whatever you want so the biggest thing is your vault hat um health report so that's if your password's been compromised or or anything along that so i'll show you guys that the emergency access is it's a nice feature it's a little a little complicated just because of all the security that's in there but the emergency access basically is um if there's somebody that you trust that you would want to give them access to your vault in the event of you being incapacitated or maybe passed away or something like that and you want somebody else to have access to all of that information to be able to run your life or shut down accounts or whatever it is you can grant them emergency access i'm not going to cover too much of that today because it's pretty well documented on their site um but but that is a nice feature that some people some people do like uh the vault through health reports i use it all the time to make sure none of my passwords are compromised so the big thing i'm going to cover today is i'm going to cover the uh nugget about the secure password generator because i really love that feature and i'm going to cover the bitboard and authenticator the totp feature because this feature alone is often enough to drive people to pay the 10 a year it certainly is enough for me and uh so let's go touch into that right now okay guys so here i'm logged into my pro account and um let's just start taking a look around so um one thing is under the tools you can see under the reports you're gonna get this in the pro account this is your passwords report and stuff like that um so any exposed passwords you can check for that so this will check like check the dark web and all those other things anything online that your password might have been exposed in some other way shape or form it's going to check that it's also going to check to see how often you're reusing your passwords this is a pretty fresh vault for me i only have a couple things in here just for our demo um but in my actual one that i use um everyone reuses their passwords in some way shape or form uh but obviously you try not to right so this is a really great report to find out how often you're reusing those passwords and then get those to be unique um so that's i really like the reuse reports one the exposed password one you know there's certain things like in my house or whatever that i haven't changed the default password on you should but if i'm doing like labs or whatever i i won't and so often it'll be like you know this is an admin password and it's been exposed you know five million not available the weak passwords is good again pretty self-explanatory do you have any weak passwords and should you beef them up unsecured website so this is just basically checking are you logging into any websites using http instead of https so you can see that up here right or maybe if you guys don't know you should be always using https that way that um when you're submitting your password across the internet it's secured um if you use just http and you submit your password anybody in the middle of that communication stand like a wi-fi at starbucks or anything along those lines they would be able to see all your data transmitting so your password would be able to snatch out of the air relatively easily so this is just a good one to be making sure you're using https um inactive two-factor report so let's just make sure that if a website offers two-factor authentication that you will do in fact have that set up um it's not perfect it has to know that you have tfa set up um and so this may not be the most accurate report but but it's good to know and data breach so is your web as your email address been exposed on any data breaches so that's basically the reports that you get with your premium some people find that valuable some people don't for me personally i think that's a huge value my mom probably wouldn't care at all but uh every once in a while i might jump on her computer and ask her to run these reports and just say hey let's just make sure things are okay so um this is a really good way of getting an idea of how secure your passwords are how well your vault's doing without having to actually know what all those passwords are so this is a really great tool um another great tool and this is the totp feature the second factor authentication so i'm going to set this up with this twitter account that i have this demo twitter account and i'm going to show you how you can actually put your second factor into the vault now again we can talk about pros and cons to doing this it really depends on what the app is and what you're trying to do um it's still a second factor of authentication and i'll show you how that works so if somebody it has my username and password they still will need that second factor to be able to log in uh so if i use my same password for multiple services um and my service you know my password is breached on one service and they start just guessing that same username passed across other services um they would not be able to log in without that second factor so a couple things there one obviously don't reuse your passwords but if you do reuse your passwords um then the second factor will at least stop that breach from happening where you're less secure is if somebody gets a hold of your vault and here in bit warden then yeah they have access to it no matter what right they'll have your username your password and your second factor so you'll want to consider you know if that were to happen would you care if they got into your twitter account versus if they got into your bank account right those would be two those would be your questions that you'd want to ask yourselves so for me there are certain features where i want the convenience of having the second factor in here and there's other things where i'd want the security to be either in my phone which again sms and auth apps can be a little tricky on security or even just put it on a hardware's token like a yubikey if you're going to store two-factor authentications into your vault make sure your volt is very very secure and by that i mean make sure you're securing it with a ub key or some kind of hardware token i do cover that in the other video again it's in the comments um but make sure you're locking down your vault with a second factor hardware token and then that way you're not going to be able to expose your vault to other other people so it's really a judgment call but this feature is really great for those things you want to have two factored but you don't want to have a major inconvenience for so let's do it with a twitter account so here i'm logged into this twitter account this is just a random account this is my actual twitter my twitter handle's at tristan bolton but this is just what we're going to do for the purposes of this demo you go into your settings here um security and account security and we're going to set up two factor authentication so now we're going to use an authentication app right you could use text message but sms stuff is getting snatched out of the air sim jackings happening a lot more viruses are on cell phones so text messages aren't really my favorite uh system uh one nice thing also about the totp if you use app authentication is uh if you use if you don't use the premium but if you use a family or an enterprise account now you'll be able to take that username and password and second factor and start to share with other people again premium is just for you but if you do family or enterprise accounts then now that second factor is in that in that vault item and you can now share that with other people in collections so that's really great so now they all have second factor without having to need access to your cell phone uh security keys are the most secure using hardware tokens and stuff like that that's not what we want what we want for this account we just want kind of good middle of the road security without compromising too much convenience so we're going to do an authenticator app and so i'm sure you guys have all done this before um where i'm going to copy my password so here's the twitter i just click the key it'll copy the password enter it in there um i'm sure you guys have seen this all before you take the qr code you take your phone you scan the qr code and uh you add it to your google authenticator or authy or whatever it is you're using well what we're going to do here is we're going to say can't scan qr code and i've seen that button pretty much any time i've ever wanted to use this feature so almost all of them will give you the option to do this private key so you take this text and you copy it and you're going to put it into your vault so here's my twitter item and i'm going to hit edit the twitter vault item and under the totp authenticator i'm going to paste that private key so you can see that so now i'm going to hit save and now it's going to generate that one time authorization key right in my vault so i can hit next and i'll just go ahead and copy this so you can click the time there or if we just click into it um you'll see it counting down to get a copy and then just paste the code in there and hit verify and now it's set up for two-factor authentication and obviously this is the backup code don't worry about trying to hack this twitter account i'm going to change all this stuff by the time i post it but that's how you will do totp in your vault so now i don't have to worry about an app on my phone or backing up my keys or having to have a hardware token for something i don't really think i need a hardware token for it is now saved in here this feature alone like i said most people would pay the 10 a year just to have the totp in their vault it really does make it quite convenient for a number of different services um again it's not for everything but it works very well so that's the one thing that i wanted to show you guys with with the premium account i did also say that there would be a nugget for you regardless if you use the premium account or the free account um and that is if you go and and actually create like a username and password for something and you're using the password generator so i do this all the time i'm just going to do this in the notepad because this might just be the easiest to kind of kind of see um here let's minimize my screen here okay so here i have a notepad and i think i've i'll just use chrome in the in the right here and here's my my password generator so let's kind of pop this out okay so let's say i need to create a username and password for any new service right so username and i just put it in you know tristan bolton and then password oh i need to create a unique one-time password so use the generator and most most systems have this you can kind of put any special characters you can drag the length to whatever you want and you copy the password and you paste it in um that's all great but i can't tell you how many times this has happened where um now i'll go and click on something else or i copy something else and then all of a sudden it's lost on my clipboard and i didn't get a chance to save it in my vault what i've learned is the best way to kind of actually create a username and password is to hit this plus button and then put your username and then password and then generate it here um but honestly i just find that it's just not my habit that's a really great way you save it in here and then you automatically populate it and that's just a habit thing so if you if you haven't have a bad habit that you need to break you should just hit the plus sign and add it in here to generate your password what i do is i hit this generator at the bottom and then i copy it and i paste it in then for whatever reason like 10 different reasons you know my clipboard gets overwritten or the vault didn't quite capture that username and password and now i don't know what my username password is so the nugget is if you look back on your generator there's a password history and i can't tell you how many times this has saved me so right now it's showing me a new password uh starting with echo 9 alpha and if i look at my password history it's going to show me that it just generated the echo 9 alpha now and this wrv one is one that i created when i showed you guys how to how to create using that plus sign but this pj b1 this is the one that i actually created earlier so just because my demo you see kind of stacked up but you can see the timeline here as to when i created them so i can see the history and now i can go copy and actually create the card so i can't i truly can't tell you how many times the password history has saved me some people would think that this is insecure and that's totally fine you know the password history does clear out over time if you want to clear it by the way you can hit the clear button and it won't remember it but sometimes just having it in there for another five minutes uh or 10 minutes or whatever it is however long it takes to clear out you know could take some time depending on how often you're generating passwords i'm not exactly sure how long it remembers it for but every time i've wanted it it's always been there and it saved me from having to either do a forgot password or totally get locked out because i didn't do it so that is included in the free account or the premium account you don't have to pay for this password history feature in the generator um but all those other features you do have to pay for so the reporting the one the the totp generator right having that in your vault and all those other features that we talked about like the emergency access and stuff so um that's it that's what i wanted to show you guys today okay guys so hopefully you found that helpful um if you did if you learned anything new here please smash that thumbs up or better yet hit that subscribe that would mean a lot to me um if you have any questions or want any clarity about anything that i said today i definitely put that in the comments below i try to watch those pretty regularly or you can always hit me up at twitter tristan bolton thanks guys have a great day you

Channel: Tristan Bolton

Views: 41,978

Keywords:

Id: zxUC7kAmYz4

Length: 18min 4sec (1084 seconds)

Published: Mon Apr 19 2021