5 ms·

You've got web interfaces and mobile apps. I use 1password and don't have this problem.

by octalmage 9y ago

brandon272 9y ago
I have no interest in logging into a password manager web interface on a public PC. (But that's just me.)
- phdp 9y ago
  You don't. You pull up your password on your phone and type it in manually onto the computer.
  - darylfritz 9y ago
    > You pull up your password on your phone and type it in manually onto the computer. Sounds like someone isn't using a 100-character randomly generated password.
    - zeveb 9y ago
      With mixed-case letters and digits, all you need are 22 characters. A 128-bit security margin is considered good enough currently; a 62-character alphabet (26 lowercase, 26 uppercase, 10 digits) provides 5.95 potential bits of entropy per character; thus a 21.50-character password would provide 128 bits. You can't have a fractional character, so … 22 characters. Typing 'tgcSq08O2fEZ5hcZk3Gvgk' in from a screen is easy enough, although not something I'd want to do every day.
    - Ajedi32 9y ago
      Maybe try InputStick then? Though I think 100 random characters is well beyond the point where you're no longer significantly increasing security by adding more characters. You can easily get 130+ bits of entropy with only 20 characters, and even for a ridiculously weak hashing algorithm like MD4 that'd be enough to withstand the entire combined strength of the Bitcoin mining network attacking your password for well over a billion years.
      - cjcampbell 9y ago
        This is the solution I've come up with as well. It's saved a lot of frustration already, which builds up quickly with when you have to retype even a 16 - 20 character random password over and over again in a short period of time. I only wish for a better iOS experience and direct integration with 1Password. Oh, and a way to prevent random connections from having keyboard access if I were to forget to unplug.
        Ajedi32 9y ago
        > a way to prevent random connections from having keyboard access if I were to forget to unplug Pretty sure that already exists, at least on Android. InputStick lets you set up a pre-shared AES Key and pairing PIN that you need in order to connect to the device.
  - brandon272 9y ago
    Parent poster said "web interfaces"
- darylfritz 9y ago
  Thanks to 2FA, I don't have a huge concern logging into a password manager on a public PC.
  - brandon272 9y ago
    Perhaps I'm overly paranoid. A public PC could be infected with god-knows-what malware that siphons off whatever that text is entered or rendered in a page or on the screen.
    - StavrosK 9y ago
      I'm the same way, if I open my manager on a public pc, for all I know every single password I have is compromised.

You've got web interfaces and mobile apps. I use 1password and don't have this problem.

brandon272 9y ago

I have no interest in logging into a password manager web interface on a public PC. (But that's just me.)

phdp 9y ago
You don't. You pull up your password on your phone and type it in manually onto the computer.
- darylfritz 9y ago
  > You pull up your password on your phone and type it in manually onto the computer. Sounds like someone isn't using a 100-character randomly generated password.
  - zeveb 9y ago
    With mixed-case letters and digits, all you need are 22 characters. A 128-bit security margin is considered good enough currently; a 62-character alphabet (26 lowercase, 26 uppercase, 10 digits) provides 5.95 potential bits of entropy per character; thus a 21.50-character password would provide 128 bits. You can't have a fractional character, so … 22 characters. Typing 'tgcSq08O2fEZ5hcZk3Gvgk' in from a screen is easy enough, although not something I'd want to do every day.
  - Ajedi32 9y ago
    Maybe try InputStick then? Though I think 100 random characters is well beyond the point where you're no longer significantly increasing security by adding more characters. You can easily get 130+ bits of entropy with only 20 characters, and even for a ridiculously weak hashing algorithm like MD4 that'd be enough to withstand the entire combined strength of the Bitcoin mining network attacking your password for well over a billion years.
    - cjcampbell 9y ago
      This is the solution I've come up with as well. It's saved a lot of frustration already, which builds up quickly with when you have to retype even a 16 - 20 character random password over and over again in a short period of time. I only wish for a better iOS experience and direct integration with 1Password. Oh, and a way to prevent random connections from having keyboard access if I were to forget to unplug.
      - Ajedi32 9y ago
        > a way to prevent random connections from having keyboard access if I were to forget to unplug Pretty sure that already exists, at least on Android. InputStick lets you set up a pre-shared AES Key and pairing PIN that you need in order to connect to the device.
- brandon272 9y ago
  Parent poster said "web interfaces"
darylfritz 9y ago
Thanks to 2FA, I don't have a huge concern logging into a password manager on a public PC.
- brandon272 9y ago
  Perhaps I'm overly paranoid. A public PC could be infected with god-knows-what malware that siphons off whatever that text is entered or rendered in a page or on the screen.
  - StavrosK 9y ago
    I'm the same way, if I open my manager on a public pc, for all I know every single password I have is compromised.