4 ms·

does that mean once you loose your master password, your whole online identity is gone for good?!

• johnhenry 10y ago
  Yes, but that's what it means for other password managers too -- or at least it should. In the case where this isn't true, a third party would have access to your passwords in order to give you access once you lose your master. The popular trend in other services is to use a master password to encrypt your data before storing it with them. In that case the third party has access to your encrypted data, but you still need your master password to decrypt it. This allows you to use a public algorithm in place of storage. You still need to remember your username, as well the site to which you want to log in to, but this isn't the hard part for most people. You could still choose to store a list of usernames and sites, but this is not generally considered sensitive information and they would be useless without the master password. The only hard thing to do is to remember (or securely store) your master password.