Ask HN: How can E2E services like 1Password and Bitwarden offer password resets?

2 points

4 years ago

This is what I don't get: if there is a way for another user – a family member or a team administrator – to reset the password of your E2E account, doesn't it mean, that the employees of 1Password[1], Bitwarden[2], and Tresorit[3] can do the same at any time?

Then what is the entire purpose of such services, if their providers still need to be blindly trusted?

I believe that it's a required feature by many enterprise customers.

Maybe that's why B2C-focused Standard Notes doesn't provide any way to recover your account if the password is lost[4].

But what is stopping them from adding such a feature in the future?

[1] https://support.1password.com/recovery/

[2] https://bitwarden.com/help/admin-reset/

[3] https://support.tresorit.com/hc/en-us/articles/216114497-I-forgot-my-password

[4] https://standardnotes.com/help/6/i-ve-forgotten-my-password-what-should-i-do

3 comments