ArrowMax

Additional vendor responses by Bitwarden to put the remediations and threat models into perspective:

Bitwarden blog post

Bitwarden cryptography report

Regarding a malicious server acting under Bitwarden’s fleet: As I see it, the most vulnerable target would be an organization’s self-hosted Bitwarden server.

Seconding Crispbread, but also think about Zwieback - it’s at least twice as crunchy and delicious, it’s right in the name!

For real though, Zwieback and tea ist ein perfekter Snack für Zwischendurch.