5 ms·
I signed up for something recently and on the password screen it popped up with something along the lines of "Hey, can we generate a secure password for you, do
by scraft 8y ago
I signed up for something recently and on the password screen it popped up with something along the lines of "Hey, can we generate a secure password for you, don't worry, your browser will remember it for you?" I said yes, sure enough a strong password appeared and Chrome offered to remember it. Seemed like a nice introduction to using secure passwords. The next thing I signed up for I manually generated a secure password and pasted it in and that is now stored in my browser too.
- Wowfunhappy 8y agoAnd now that person is forever locked in to the browser they were using at sign up time. What happens if they move from Mac → Windows or Android → iOS?
- Ajedi32 8y agoAs long as they use the same browser on each of those platforms, they're good. Yes, vendor lock-in is an issue; and I hope eventually there'll be a way to sync credentials across browsers. But keep in mind that, even as things are now, it only locks you to a specific browser, not to a specific OS.
- Filligree 8y agoExporting the passwords is also possible, so it's not really much lock-in. Not to the kind of person who'd care, and want to switch browsers.
- Skunkleton 8y agoYou got it backwards. Vendor lock-in rarely applies to experts. It is the people who "don't care" that _we_ should care about protecting from lock-in. After all, that is how we got internet explorer 6.
- Filligree 8y agoThose, in my experience, are the same people who can't switch browsers. They aren't capable of learning new things, and can often barely keep going with what they have.
- Skunkleton 8y agoNot in my experience. They are the people who just don't care. What they have works well enough, so they don't look to change it.
- cheeze 8y agoAssuming your browser syncs passwords, etc. I know a ton of people who use Chrome on non-mobile and Safari on mobile.
- Wowfunhappy 8y agoGood point—anyone using Chrome is good. I was thinking of people who are using Safari or Edge, which aren't available on other platforms.
- vertex-four 8y agoI think most browsers can import most information from most other browsers at this point.
- creeble 8y agoOr use more than one device to login?
- icebraining 8y agoAll major browsers can sync their passwords across their desktop and mobile versions. I use Firefox Sync on two laptops, one desktop and an Android phone.
- creeble 8y agoI was unaware that Firefox / Chrome can own all your passwords in their cloud.
- icebraining 8y agoNot sure about Chrome, but Firefox encrypts everything on the client before syncing, they only see blobs of bytes. Plus you can run your own Sync server.
- creeble 8y agoAncient reply, but... Even if Firefox "encrypts" before syncing, they must decrypt in order to provide the clear text password from another browser, no? They don't send "blobs of bytes" to password form entries.
- ngrilly 8y agoDo you remember the URL of this website?
- sinatra 8y agoMost browsers still don't have a second line of defense (like password managers do), correct? So, if a user has access to my browser for two mins, they can see all my passwords in plain text. They can't if my passwords are in password managers which will ask for my master password. I never understood why browsers didn't give an option to have a bit more security with those passwords. Just let the user enter one master password before they can see their stored passwords.