bitwarden/help
1
0
Fork 0
mirror of https://github.com/bitwarden/help synced 2025-12-06 00:03:30 +00:00
Code Issues Releases Wiki Activity

Security Content (#342)

Browse Source 
* Data use (#336)

* re-purpose article for data use considerations

* Update stored-data.md

* security - everything but faqs

* security faqs

* split data article

* faq update

* faq fix

* faq fix #?

* title fix

* list reposition & title change

* faq fix

* final fixes
This commit is contained in:
fred_the_tech_writer
2021-01-05 08:47:39 -05:00
committed by GitHub
parent 2cdca9f136
commit 9e5eec3ac4
17 changed files with 256 additions and 231 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
_articles/miscellaneous/subprocessors.md
View File

@@ -1,10 +1,11 @@
---
layout: article
title: Who are Bitwarden's Subprocessors?
categories: [miscellaneous]
title: Bitwarden's Subprocessors
categories: [security]
featured: false
popular: false
tags: []
order: 07
---
Reference the table below for a list of Bitwarden's subprocessors.

25
_articles/miscellaneous/website-icons.md
View File

@@ -1,35 +1,40 @@
---
layout: article
title: Your privacy when using website icons
categories: [miscellaneous]
title: Privacy when using Website Icons
categories: [security]
featured: false
popular: false
tags: [icons, website icons, privacy]
order: 06
---
*Bitwarden does not collect any information when you download icons for website logins stored in your Bitwarden vault.*
## The Bitwarden icons server
## Using Website Icons
When Bitwarden displays a login item associated with a website in your Bitwarden vault it attempts to accompany it with a "website icon". This "website icons" feature allows you to easily identify particular logins in your vault by a recognizable icon. This is usually represented by a logo or brand image of that website. The Bitwarden icons server provides the delivery endpoint for these website icons.
When Bitwarden displays a login item associated with a website in your Vault (determined by the URI field), it attempts to accompany it with a graphical "website icon".
If you are using the "website icons" feature on a device, Bitwarden will issue requests to `icons.bitwarden.net` for each item of type "Login" in your vault that has a URI that resembles a website (ex. `google.com` or `https://google.com`, but not `google` or `http://localhost`). The icons server is fronted with a CDN that caches the icons on Cloudflare's edge nodes all around the world. Subsequent requests to the same icon will likely hit CDN caches instead of the icons server directly. Your requests may never actually hit Bitwarden's icons server because another Bitwarden user with the same website in their vault requested the icon before you.
Website icons help you to easily identify particular logins in your Vault by recognizable iconography, usually represented by a logo or brand image of that website. The Bitwarden icons server provides the delivery endpoint for these website icons.
## Privacy concerns
If you are using website icons on a device, Bitwarden will issue requests to `icons.bitwarden.net` for each item of type "Login" in your Vault that has a URI that resembles a website (ex. `google.com` or `https://google.com`, but not `google` or `http://localhost`).
Bitwarden's icons server is fronted with a CDN that caches the icons on Cloudflare's edge nodes all around the world. Subsequent requests to the same icon will likely hit CDN caches instead of the icons server directly. Your requests may never actually hit Bitwarden's icons server because another Bitwarden user with the same website in their Vault requested the icon before you.
## Privacy Concerns
Because a request for an icon image contains the hostname of the website stored in your vault, it is important to understand that this feature will "leak" otherwise cryptographically protected information to Bitwarden servers and/or CDN endpoints. An example of a icon request looks like the following:
`https://icons.bitwarden.net/google.com/icon.png`
**The icons server endpoints do not log or collect any information regarding icon image requests.** However, this is something you would have to take our word for since we have no way to demonstrate this publicly other than reviewing our [open source codebase](https://github.com/bitwarden).
**The icon server endpoints do not log or collect any information regarding icon image requests.** However, this is something you would have to take our word for since we have no way to demonstrate this publicly other than reviewing our [open source codebase](https://github.com/bitwarden).
## Disabling website icons
## Disabling Website Icons
We understand that certain privacy-minded users may not want to use the "website icons" feature. We provide the option to disable website icons on all Bitwarden client applications:
We understand that certain privacy-minded users may not want to use website icons. We provide the option to disable website icons on all Bitwarden client applications:
- **Web vault:** Settings → Options → Disable Website Icons
- **Browser extension:** Settings → Options → Disable Website Icons
- **Mobile app:** Settings → Options → Disable Website Icons
- **Desktop app:** Settings → Options → Disable Website Icons
When the website icons feature is disabled, Bitwarden will opt to show you a generic, locally accessed icon instead ({% icon fa-globe %}) that is the same for all login items stored in your vault.
When website icons are disabled, Bitwarden will opt to display a generic, locally accessed icon instead ({% icon fa-globe %}) for all login items stored in your vault.