4 ms·
PassKey is a web based password manager; it allows you to sign in with 1 click to your online accounts. It's easy to use, you mainly interact with it via a boo
by PawelDecowski 16y ago
PassKey is a web based password manager; it allows you to sign in with 1 click to your online accounts.
It's easy to use, you mainly interact with it via a bookmark(let).
It's secure:
* All connections are HTTPS
* Passwords are stored encrypted with AES
* Encryption key is stored in your browser, in a bookmark(let)
I'd love to hear your feedback.
- ithkuil 16y agoI think the point is that we have to trust you, that the passwords are stored encrypted. Right? Or there is a way to see that you are passing the encrypted password and the bookmarklet "decrypts" it locally without passing through your site?
- PawelDecowski 16y agoEncryption and decryption happen on the server. You need to trust me on that. I may implement client-side encryption/decryption. I need to look into it.
- erikano 16y ago>Encryption and decryption happen on the server. You need to trust me on that. So in the event that someone breaks into your server, what keeps them from stealing my unique encryption key the next time I use your service?
- PawelDecowski 16y agoNothing at the moment.