3 ms·

Well, I know exactly what goes in the Chrome extension (https://github.com/ericwoodruff/passwordhasherplus https://github.com/ericwoodruff/passwordhasherplus) o

Well, I know exactly what goes in the Chrome extension (https://github.com/ericwoodruff/passwordhasherplus https://github.com/ericwoodruff/passwordhasherplus) or the android app (https://github.com/ginkel/hashit https://github.com/ginkel/hashit) The point is that I do NOT want to store (even hashed) passwords with a third party in the hopes that they will be able to protect my passwords, when I can generate them on the spot from the device I'm using. But that's just me. My post was just a comment on how people find third party password managers so secure. I can't be the only paranoid about this...

ZoFreX 10y ago
Obviously there's a trade-off between security and convenience here, and that's a very personal choice to everyone, so I'm not going to argue that part of things with you. I do have to point out a couple of things though. Password managers don't store "hashed" passwords with a third party - they store encrypted ones. I also wouldn't personally use the phrase "in the hopes that they will be able to protect my passwords" - I don't rely on LastPass protecting squat. If their entire database leaked, my passwords are still safe. I think that element of the design is very important and wouldn't use a system where hope was required! You certainly aren't the only paranoid one and lots of people on HN seem pretty wary of password managers :)