I get the desire to make the Bitwarden login more secure, but this is very likely to cause problems for users who don't have their email password memorized. 2FA already carries the burden of needing a backup if you lose your phone. This change means users will need to come up with an alternate way to log in to their email account. I'm not sure it's worth it.
This reminds me of the Verizon debacle where the user couldn't convince the customer service reps that 0.002 cents is not the same as 0.002 dollars. It was hilarious to hear the phone calls, but would have been maddening to experience. Arguing with an AI about the year is funny, until it's you arguing with it after you were billed for an extra 10 months of service.
reply