3 ms·
Not so much browser exploits, but the browser extensions often have issues. If your password manager is a separate binary, you usually don't have to worry about
by palant 8y ago
Not so much browser exploits, but the browser extensions often have issues. If your password manager is a separate binary, you usually don't have to worry about websites exploiting it. On the other hand, it won't protect you against phishing attacks (it doesn't know what site you are on) and will usually require that you to handle passwords via the clipboard.
- SlowRobotAhead 8y agoIsn't it worth noting that LastPass / Dashlane / and others claim they are storing your binary blob on their cloud to be decrypted only on your machine and never theirs? I think that's an area between "we store your passwords on our server" and "this file I store has all my passwords". No?
- palant 8y agoAt least in case of LastPass you shouldn't buy the marketing statements. Not only isn't it really a binary blob that they are storing, they don't really care about protecting it from themselves either. https://palant.de/2018/07/09/is-your-lastpass-data-really-safe-in-the-encrypted-online-vault https://palant.de/2018/07/09/is-your-lastpass-data-really-sa...