# Better ciphers Argon2

**URL:** <https://vaultwarden.discourse.group/t/better-ciphers-argon2/1503>\
**Category:** Feature Requests\
**Created:** [March 9, 2022, 10:02pm UTC](https://vaultwarden.discourse.group/t/better-ciphers-argon2/1503 "2022-03-09T22:02:28Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![l0rdraiden](https://avatars.discourse-cdn.com/v4/letter/l/b5a626/32.png) [@l0rdraiden](https://vaultwarden.discourse.group/u/l0rdraiden)\
**Post date:** [March 9, 2022, 10:02pm UTC](https://vaultwarden.discourse.group/t/better-ciphers-argon2/1503/1 "2022-03-09T22:02:28Z")

</div>

It has been requested for years in bitwarden forum with no progress and I wonder if this could be added to vaultwarden.

> **[Switch to Argon2](https://community.bitwarden.com/t/switch-to-argon2/350/52)**
>
> Is this planned at all? or is a dead end?

> **[Add twofish/chacha20 encryption options using Argon2id as KDF](https://community.bitwarden.com/t/add-twofish-chacha20-encryption-options-using-argon2id-as-kdf/36497)**
>
> \#encryption and derivation function Argon2id! it should have twofish or Xchacha20 encryption besides Aes Feature function chacha20 and twofish i found faster then the Aes when encrypting text documents and studies shows Twofish and chacha are...

---

<div class="post-metadata">

**Author:** ![BlackDex](https://yyz2.discourse-cdn.com/free1/user_avatar/vaultwarden.discourse.group/blackdex/32/8_2.png) [@BlackDex](https://vaultwarden.discourse.group/u/BlackDex)\
**Post date:** [March 9, 2022, 10:21pm UTC](https://vaultwarden.discourse.group/t/better-ciphers-argon2/1503/2 "2022-03-09T22:21:00Z")

</div>

Quick and short answer, no.

Main reason is that the backend does not do any encryption. Only the clients encrypt and decrypt. So if one client uses method x, the other clients also need to support that.

---

<div class="post-metadata">

**Author:** ![l0rdraiden](https://avatars.discourse-cdn.com/v4/letter/l/b5a626/32.png) [@l0rdraiden](https://vaultwarden.discourse.group/u/l0rdraiden)\
**Post date:** [March 10, 2022, 7:35pm UTC](https://vaultwarden.discourse.group/t/better-ciphers-argon2/1503/3 "2022-03-10T19:35:59Z")

</div>

Ok, I understand but then, when you import your passwords on Vaultwarden web ui and you have them in a plain text on a CSV, aren’t the credentials encrypted at this point by vaultwarden?

I understand that then in order for a client to unencrypted the file both sides would need to be able to use the same encryption/decryption but I’m asking for curiosity.

---

<div class="post-metadata">

**Author:** ![BlackDex](https://yyz2.discourse-cdn.com/free1/user_avatar/vaultwarden.discourse.group/blackdex/32/8_2.png) [@BlackDex](https://vaultwarden.discourse.group/u/BlackDex)\
**Post date:** [March 10, 2022, 7:51pm UTC](https://vaultwarden.discourse.group/t/better-ciphers-argon2/1503/4 "2022-03-10T19:51:46Z")

</div>

The server never ever receives unencrypted secrets.

See: [Encryption | Bitwarden Help & Support](https://bitwarden.com/help/what-encryption-is-used/)

There is a link also to the white paper which explains it in more details.

---

<div class="post-metadata">

**Author:** ![barrenechea](https://yyz2.discourse-cdn.com/free1/user_avatar/vaultwarden.discourse.group/barrenechea/32/811_2.png) [@barrenechea](https://vaultwarden.discourse.group/u/barrenechea)\
**Post date:** [February 15, 2023, 12:23pm UTC](https://vaultwarden.discourse.group/t/better-ciphers-argon2/1503/5 "2023-02-15T12:23:09Z")

</div>

Argon2 is now being added over the Client apps [Release Web v2023.2.0 · bitwarden/clients · GitHub](https://github.com/bitwarden/clients/releases/tag/web-v2023.2.0)

> **[r/Bitwarden - Argon2 is live](https://www.reddit.com/r/Bitwarden/comments/112o9vd/argon2_is_live/)**
>
> 55 votes and 37 comments so far on Reddit

---

<div class="post-metadata">

**Author:** ![max](https://avatars.discourse-cdn.com/v4/letter/m/e5b9ba/32.png) [@max](https://vaultwarden.discourse.group/u/max)\
**Post date:** [February 24, 2023, 4:35am UTC](https://vaultwarden.discourse.group/t/better-ciphers-argon2/1503/6 "2023-02-24T04:35:37Z")

</div>

I assume we’ll get the new dropdown option once the web ui is updated with the latest BW web ui?

---

<div class="post-metadata">

**Author:** ![PeterR](https://avatars.discourse-cdn.com/v4/letter/p/9de0a6/32.png) [@PeterR](https://vaultwarden.discourse.group/u/PeterR)\
**Post date:** [March 3, 2023, 4:37am UTC](https://vaultwarden.discourse.group/t/better-ciphers-argon2/1503/7 "2023-03-03T04:37:42Z")

</div>

I upgraded to web build Version 2023.2.0, however when I try to change to Argon2id encryption, there’s a webassembly error, I’ve tried using firefox, vivaldi & opera.

 ![Screenshot 2023-03-03 122927](https://global.discourse-cdn.com/free1/uploads/vaultwarden/original/2X/0/0ff049d4a4dafb1738596e0a411dc190b24ed72b.png)

---

<div class="post-metadata">

**Author:** ![cksapp](https://avatars.discourse-cdn.com/v4/letter/c/b9e5f3/32.png) [@cksapp](https://vaultwarden.discourse.group/u/cksapp)\
**Post date:** [March 3, 2023, 5:02pm UTC](https://vaultwarden.discourse.group/t/better-ciphers-argon2/1503/8 "2023-03-03T17:02:55Z")

</div>

Do you have [WASM support](https://community.bitwarden.com/t/argon2-kdf-support/48825/41) in your browser?

---

<div class="post-metadata">

**Author:** ![PeterR](https://avatars.discourse-cdn.com/v4/letter/p/9de0a6/32.png) [@PeterR](https://vaultwarden.discourse.group/u/PeterR)\
**Post date:** [March 4, 2023, 12:54am UTC](https://vaultwarden.discourse.group/t/better-ciphers-argon2/1503/9 "2023-03-04T00:54:49Z")

</div>

I thought I had, I’d successfully run webassembly checks on the browsers I was trying with. After your post I tried Firefox 112 and I could change to Argon2 in the web vault.

Thank you!

---

<div class="post-metadata">

**Author:** ![cyanide77](https://yyz2.discourse-cdn.com/free1/user_avatar/vaultwarden.discourse.group/cyanide77/32/917_2.png) [@cyanide77](https://vaultwarden.discourse.group/u/cyanide77)\
**Post date:** [March 4, 2023, 11:17am UTC](https://vaultwarden.discourse.group/t/better-ciphers-argon2/1503/10 "2023-03-04T11:17:42Z")

</div>

Is this running on vaultwarden/testing image? Or bitwarden?
