4 ms·
Never heard of SRP before, so I have no idea how it compares. As for password managers, SQRL has the following advantages: 1. Easier to set up new accounts. No
by Ajedi32 9y ago
Never heard of SRP before, so I have no idea how it compares. As for password managers, SQRL has the following advantages:
1. Easier to set up new accounts. No fiddling with onerous password requirements or text boxes; just one click and you're done.
2. More secure and/or convenient than password managers when signing in on a public computer (scan QR code with phone vs. load entire password DB onto computer or manually retype password via keyboard)
3. Better recovery against the worst-case scenario of database leak (SQRL client can transparently and automatically rotate your credentials, vs having to do it all manually with a password manager, and there's no list of sites you have an account on that the attacker can use against you)
4. Possible for sites to enforce the use of SQRL, whereas password managers need a password field to function, thereby encouraging users to continue insecure practices like weak passwords and password reuse.
5. Public keys instead of bearer tokens means you don't have to worry about rotating credentials if a site leaks its database.
Like I said, it's pretty much just a password manager, but better.