3 ms·
Have you seen the comments for this[0] thread? * What happens when you need to change any single one of those passwords? Don't you need to change all of them?
by pipework 10y ago
Have you seen the comments for this[0] thread?
* What happens when you need to change any single one of those passwords? Don't you need to change all of them?
[0]: https://news.ycombinator.com/item?id=12889807 https://news.ycombinator.com/item?id=12889807
edit: "any single..." includes the master password itself & any of the individual site passwords for that master password.
- mrich 10y agoThere also is a counter used for hashing. So for a new password you just increment the counter. Remembering the counter for every site sounds too complicated, but you could store that in a file without losing much (any?) protection.
- StavrosK 10y agoYeah, but then you need to carry the file with you, opening it (especially on mobile) is super clunky, and when you get to a site that doesn't support numbers/letters/whatever that the generator uses, it's hell. I used to use that, but I switched to KeePass2 and it's much better.
- pipework 10y agoWouldn't you want to maybe... encrypt that file? Seems almost circular unless you use something like stenography to embed the data somewhere. I'm not personally too thrilled by a counter file to replace a different file, at that point I feel like I'm losing features.