Bitwarden Admin Password Reset waiver

Bitwarden is a password management platform provided by the University of Waterloo Libraries to assist staff with the secure management of their passwords. You can use Bitwarden to save passwords from any service, including services that are not necessarily work-related. The service requires users to create a Master Password to access saved passwords; this master password is your only way of getting access to your saved passwords. Normally, there is no way to reset your Master Password should it be forgotten. In such an event, the account and any data stored within would need to be deleted and recreated. Bitwarden provides an Admin Password Reset functionality that will allow designated administrative users (e.g. Libraries IT staff) to reset your master password should you forget it. This would mean Libraries IT staff could get access to your store of passwords, if they abused the system. This sort of abuse would be considered a violation of Policy 33 – Ethical Behaviour. What follows is an opportunity to opt-in to the Admin Password Reset functionality.

By opting into the Admin Password Reset functionality of the University of Waterloo Bitwarden Organization, I understand that:

  • Bitwarden service administrators at the University of Waterloo Libraries (i.e. staff in the Library Technology department) will be able to reset my Bitwarden Master Password. 

  • Abuse of this functionality on the part of a Bitwarden service administrator account could result in compromising the data protected by my Master Password.

I understand the risks of opting in to the Bitwarden Admin Password Reset functionality, and I waive my right to hold the Libraries responsible for any damages resulting from such a misuse. You can rescind your agreement at any time by contacting the Libraries Help Desk, but subsequently you will not be able to make use of Admin Password Reset.