Though the risk involved in rotating your encryption key does not exist when changing KDF iteration count, we still recommend exporting your vault beforehand. When you change the iteration count, you'll be logged out of all clients. We recommend that you increase the value in increments of 50,000 and then test all of your devices.

Setting your KDF iterations too high could result in poor performance when logging into (and unlocking) Bitwarden on devices with slower CPUs. It implements the industry-leading security strong AES-256 encryption, 2FA, zero-knowledge architecture, and its security is regularly audited by third-party firms and researchers. See here for information on re-encrypting your data. Bitwarden is an open-source password management tool that lets you generate, sync, manage, consolidate, and share all of your passwords in one place. Changing the iteration count will re-encrypt the protected symmetric key and update the authentication hash, much like a normal master password change, but will not rotate the symmetric encryption key so vault data will not be re-encrypted. Bitwarden is an open-source password management tool that lets you generate, sync, manage, consolidate, and share all of your passwords in one place. Bitwarden uses a secure default, as mentioned above, however you can change the iteration count from the Account Settings → Security → Keys menu of the web vault.Ĭhanging the iteration count can help protect your master password from being brute forced by an attacker, however should not be viewed as a substitute to using a strong master password in the first place.

Bitwarden reddit