4 ms·
Because then you're out of luck when you need to update your password, say, due to a data breach at your target site. Or when the deterministically generated p
by jacobwg 9y ago
Because then you're out of luck when you need to update your password, say, due to a data breach at your target site. Or when the deterministically generated password doesn't meet the specific password requirements of the website. Or if somebody can capture your input "seed", they can generate all your passwords without needing to capture your password database like they would in another password manager.
- agentgt 9y agoLoosing the master password (or key or whatever) that is used to generate the passwords for a deterministic password generator is fairly similar to loosing the password database. One is really not that much more secure than the other particularly when dealing with online websites. But yeah if the site gets hacked you have to pick and remember an iterated password (ie a next iteration) or regenerate a new master password. Of course if you are really paranoid you can always generate a password with dice and write that password down somewhere in safe place (ie offline password generation).