4 ms·
I don't know whether [LessPass](https://lesspass.com/ https://lesspass.com/) is reputable, but it's notable for its approach. It's primarily a password generat
by gregknicholson 9y ago
I don't know whether [LessPass](https://lesspass.com/ https://lesspass.com/) is reputable, but it's notable for its approach.
It's primarily a password generator, rather than a password manager. It reproducibly generates difficult-to-guess passwords, using as input: the site's URL, your username and a master password. You save, sync and retrieve your passwords using your browser's built-in password manager.
I never previously used a password manager because I wanted to ensure I would always have access to my passwords. I started using LessPass because:
* When I need to log in on a non-synced device (such as someone else's computer), I can read the site's password from Firefox on my phone and transcribe it.
* If I lose all of my devices, I can still retrieve my existing passwords, because the password generation algorithm uses only my master password as salt.
- TheDong 9y agoLesspass is not notable for its approach; deterministic password managers have existed for quite some time. They're often recommended against, and it's dangerous to use one without a full understanding of the significant caveats. See https://tonyarcieri.com/4-fatal-flaws-in-deterministic-password-managers https://tonyarcieri.com/4-fatal-flaws-in-deterministic-passw..., the hacker news discussion, https://news.ycombinator.com/item?id=13016132 https://news.ycombinator.com/item?id=13016132, and notably the top comment there.