3 ms·
fwiw a password manager doesn't have to be such a single point of failure. I use `password-store`, which means to get a password I just need access to my gpg k
by TheDong 8y ago
fwiw a password manager doesn't have to be such a single point of failure.
I use `password-store`, which means to get a password I just need access to my gpg key.
My gpg key lives on 3 yubikeys and in 1 bankvault as a paper backup.
If my main yubikey is destroyed or I somehow forget the pin to it, I just need to go to the bank vault.
If I wanted to err on the side of being more able to access it, I could leave an unencrypted copy of the gpg master key with a trusted friend.
Since there are many password managers with different models, I think it's difficult to quantify exactly the failure mode of each.
However, the reality is almost all security experts recommend password managers, and almost everyone who uses 1password for a while doesn't want to go back.. so clearly there's something to it.
The only people I see doubting are people who have uneasy feelings but haven't really written down their threat model nor consulted security professionals.