The Quiet Renovation at Bitwarden

· business · Source ↗

TLDR

  • Bitwarden’s new CEO leads with M&A and PE experience, “Always free” language vanished from the site, and core values were silently rewritten – all without any public announcement.

Key Takeaways

  • Longtime CEO Michael Crandell moved to advisory role in February with no company announcement; replacement Michael Sullivan’s LinkedIn leads with PE and M&A expertise.
  • CFO Stephen Morrison departed April, replaced by former InVision CEO Michael Shenkman; founder Kyle Spearrin remains as CTO.
  • “Always free” removed from the personal plan page mid-April; Crandell had called it “a firm commitment… fully featured, free forever” in a 2024 interview.
  • GRIT values quietly changed: Inclusion and Transparency replaced by Innovation and Trust, surfaced only via a half-edited 2022 blog post that now contradicts itself.
  • Vaultwarden self-hosting works because Bitwarden clients are Apache 2.0 licensed, but tolerance of the unofficial Vaultwarden API could end without announcement if commercial calculus shifts.

Hacker News Comment Review

  • Consensus is that PE-style leadership signals value extraction over product quality, prompting migration urgency rather than wait-and-see.
  • KeepassXC plus KeepassDX plus Syncthing is the most recommended self-contained alternative; commenters note Bitwarden import is trivial and the Keepass experience has improved significantly.
  • Vaultwarden is broadly recommended but with caveats: requires disciplined backup strategy, off-site copies, and regular restore drills – not a casual side project when it holds all your secrets.

Notable Comments

  • @dd8601fn: Notes password managers have no real import/export moat, so migration to Proton Pass or Vaultwarden is feasible, but flags that self-hosting the “keys to your life” demands a higher diligence bar than typical self-hosted apps.

Original | Discuss on HN