3 ms·
If you are able to remember and type different passwords that encode 96-128 bits of entropy for all your services, logins and passphrase needs, without re-using
by e12e 8y ago
If you are able to remember and type different passwords that encode 96-128 bits of entropy for all your services, logins and passphrase needs, without re-using a password or elements of it; then sure: it might be "more" secure to just use passwords.
I haven't looked too closely at 1password - but with for example bitwarden the master password is used via kdf to encrypt all data client side. If you don't self-host - you're still just a single service away from compromise (an attacker could log the passphrase in a compromised client) - but on balance I'd say it's more secure than trying to memorize dozens or more strong passwords.