How Bitwarden Encrypts and Decrypts Secrets

The article explains how Bitwarden and its self-hosted clone Vaultwarden encrypt and decrypt secrets stored in a SQLite database. The author explores rolling their own secret management tooling and provides working Python code for decryption, partly motivated by a recent supply chain attack on the official Bitwarden CLI client.