Bitwarden introduces ‘Cupid Vault’ for secure password sharing

Bitwarden has launched a new system called ‘Cupid Vault’ that allows users to safely share passwords with trusted email addresses.

Cupid Vault works by allowing users of the free version of Bitwarden to create a 2-person shared vault called an ‘Organization’. Other users can access the logins inside the Organization space with credentials assigned by the owner of the account.

Inviting a user (partner, friend, family member) to an Organization can be done by adding their email address as a second member.

This way, Bitwarden users can share in a secure way collections of login pairs for media streaming service accounts or other online platforms.

Setting up an Organization and creating shared collections is possible by logging into the Bitwarden vault via the web interface.

To prevent adversary-in-the-middle enrollment attacks, vault owners can verify through a fingerprint phrase that the intended member is getting access. The shared vault is completely isolated from the personal vault.

Access to the Organization vault and the secrets it contains can be revoked at any time, and sharing can be configured in both directions.

Bitwarden published a detailed guide on how to set up and use Cupid Vault, which explains that ownership of items within a new Organization isn’t tied to their creator, as both members can perform editing or deletion actions.

Bitwarden is a popular open-source password manager that lets users securely store, generate, and autofill passwords and other sensitive information.

It’s cross-platform, supporting a range of browsers, desktop operating systems, and mobile platforms, and protects stored data using end-to-end encryption.

The new Cupid Vault feature, launched ahead of Valentine’s Day, is available at no charge to all users and can be set up through the free plan. However, there’s a limit of 2 Collections and 2 users each.

Family, Teams, and Enterprise plan users already get multiple users, collections, and granular role-based access control permissions, so Cupid Vault is redundant for paying tiers and shouldn’t be confused with the secret-sharing features available to them.