3 ms·
It might be a good alternative to Enpass. They use Rust and libsodium, which is a good sign. But browser integration is the trickiest part in a modern password
by jedisct1 9y ago
It might be a good alternative to Enpass. They use Rust and libsodium, which is a good sign.
But browser integration is the trickiest part in a modern password manager, yet what makes a password manager actually usable for most people.
So, give it some time before using the browsers (currently only Chrome) extension. Virtually all other password managers had security issues here.
Making these extensions smart (able to guess where login and password fields are, when passwords are being updated, etc) is also far from trivial. It's actually way more complex than password storage.
Gonna stick with Enpass for now, but that's definitely a project to watch.
- wntrmt 9y ago> So, give it some time before using the browsers (currently only Chrome) extension. Virtually all other password managers had security issues here. Do you have a source for that? We are currently using teampasswordmanager.com and I was wondering if there are any known security issues I have not heard about. Altgough the author refused to provide the sourcee, I had a look at the Chrome Extension anyway, but any additional info would be great.
- arkadiyt 9y agoHere's one example - LastPass had remote code execution as a result of their browser extension: https://bugs.chromium.org/p/project-zero/issues/detail?id=1225&can=1&q=lastpass&desc=6 https://bugs.chromium.org/p/project-zero/issues/detail?id=12...