5 ms·

The only cloud based password manager I'm willing to use is Dashlane[1]. It's supposedly "zero knowledge", and although you can never be 100% there isn't some b

by danr4 9y ago

The only cloud based password manager I'm willing to use is Dashlane[1]. It's supposedly "zero knowledge", and although you can never be 100% there isn't some bug waiting around to be exploited, it's a compromise I'm willing to make (the lesser evil). They also have several complementing features like encrypted notes, auto saving receipts, credit cards, batch password changer with quite a few major sites. I'm not affiliated with them, it's just I never see them on HN compared to mainstream applications like LastPass, 1Pass, OneLogin and such.. and I think their services are better. Plus their support is great. On the other hand, if everybody starts using it maybe it'll become a bigger target for hackers. so don't tell everyone :) [1] http://dashlane.com http://dashlane.com

JoshTriplett 9y ago
> The only cloud based password manager I'm willing to use is Dashlane[1]. It's supposedly "zero knowledge", Firefox Sync has a similar property; everything is client-side encrypted.
- j605 9y ago
  Firefox sync got a security audit recently. I would trust it more.
6ak74rfy 9y ago
They are a bit expensive though.
npongratz 9y ago
They might have great features, but are Dashlane using the term "zero knowledge" in the accurate, historical (25+ years), cryptographic sense, a la [0]? Or are they just using it in the hand-wavey slick markety sense, "We could never know your secrets; give us your money and your secrets and trust us forever."? [0] Words mean things. They are dealing with encrypting passwords, after all, so I hope they're truthfully representing the technology behind their system: https://en.wikipedia.org/wiki/Zero-knowledge_proof https://en.wikipedia.org/wiki/Zero-knowledge_proof Maybe even: https://en.wikipedia.org/wiki/Zero-knowledge_password_proof https://en.wikipedia.org/wiki/Zero-knowledge_password_proof My money's on some corporate bullshit, however, for example: https://news.ycombinator.com/item?id=13303436 https://news.ycombinator.com/item?id=13303436

by danr4 9y ago

JoshTriplett 9y ago

> The only cloud based password manager I'm willing to use is Dashlane[1]. It's supposedly "zero knowledge", Firefox Sync has a similar property; everything is client-side encrypted.

j605 9y ago
Firefox sync got a security audit recently. I would trust it more.

6ak74rfy 9y ago

They are a bit expensive though.

npongratz 9y ago

They might have great features, but are Dashlane using the term "zero knowledge" in the accurate, historical (25+ years), cryptographic sense, a la [0]? Or are they just using it in the hand-wavey slick markety sense, "We could never know your secrets; give us your money and your secrets and trust us forever."? [0] Words mean things. They are dealing with encrypting passwords, after all, so I hope they're truthfully representing the technology behind their system: https://en.wikipedia.org/wiki/Zero-knowledge_proof https://en.wikipedia.org/wiki/Zero-knowledge_proof Maybe even: https://en.wikipedia.org/wiki/Zero-knowledge_password_proof https://en.wikipedia.org/wiki/Zero-knowledge_password_proof My money's on some corporate bullshit, however, for example: https://news.ycombinator.com/item?id=13303436 https://news.ycombinator.com/item?id=13303436