Over the last few weeks, I've been migrating from 1Password Business to BitWarden Enterprise.

[jlamoree@infosec.exchange]

Over the last few weeks, I've been migrating from 1Password Business to BitWarden Enterprise. After experiencing the difference in the way that these (and other) password managers integrate with the web browser, I'm left with two conclusions:

- Web browser vendors are actively hostile to extensions and they secretly wish they didn't have to sully their products to support any grotesque code from plebeians.

- Web developers are being instructed by product owners to perform security theater in the login UX such that a user who does not manually type their shitty password into an injected shadow DOM React form control is proper fucked.

Yes, I still use passwords. I'm not going to do free debugging when configuring Passkeys with eight different browser implementations on a dozen devices.