4 ms·

> "First and foremost, password managers are a good thing. All password managers we have examined add value to the security posture of secrets management" This

> "First and foremost, password managers are a good thing. All password managers we have examined add value to the security posture of secrets management" This is the point for 99.9% of people. If you're at risk of having someone attack you and your digital life in a targeted way, perhaps consider evaluating the security implications of each password manager. Otherwise, pick any damn password manager and focus on something else.

SlowRobotAhead 8y ago
>Otherwise, pick any damn password manager and focus on something else. Absolutely! For me, choices narrowed down to needing something cloud portable, 2FA, not needed another service like Dropbox just to access it, IOS integration, easy to share passwords with auto-update and revocation. But yea... just use something!
- yinyang_in 8y ago
  I always prefer if it's via Dropbox or some other sync provider, so that my data is safe. For example dropbox, they are into storage and their speciality is in storage, safety of data. Password manager app can be good in app making part but storage with them always scares me and I think their speciality is in app making. What do you think about it, just want to understand your perspective nothing else. Yes i use a password manager.
  - WorldMaker 8y ago
    Plus, there are so many options in "dumb but varying spectrum of secure file sync" (Dropbox, OneDrive, GDrive, Resilio Sync, scp, rsync, xcopy, robocopy, USB sticks, floppy disks, etc and so on) that it is easier to adapt your storage model as your threat model changes. Though you should never entirely rely on security through obscurity, depending on your threat model, there may be no way for an untargeted attacker to even know which storage service you are using given so many possible choices.
seppin 8y ago
> Otherwise, pick any damn password manager and focus on something else. People make the same mistake at the gym. "Which workout plan should I use?" Any plan. Any of them.
- iamkroot 8y ago
  I've always said that the best workout plan is the one that you'll actually do.

SlowRobotAhead 8y ago

>Otherwise, pick any damn password manager and focus on something else. Absolutely! For me, choices narrowed down to needing something cloud portable, 2FA, not needed another service like Dropbox just to access it, IOS integration, easy to share passwords with auto-update and revocation. But yea... just use something!

yinyang_in 8y ago
I always prefer if it's via Dropbox or some other sync provider, so that my data is safe. For example dropbox, they are into storage and their speciality is in storage, safety of data. Password manager app can be good in app making part but storage with them always scares me and I think their speciality is in app making. What do you think about it, just want to understand your perspective nothing else. Yes i use a password manager.
- WorldMaker 8y ago
  Plus, there are so many options in "dumb but varying spectrum of secure file sync" (Dropbox, OneDrive, GDrive, Resilio Sync, scp, rsync, xcopy, robocopy, USB sticks, floppy disks, etc and so on) that it is easier to adapt your storage model as your threat model changes. Though you should never entirely rely on security through obscurity, depending on your threat model, there may be no way for an untargeted attacker to even know which storage service you are using given so many possible choices.

seppin 8y ago

> Otherwise, pick any damn password manager and focus on something else. People make the same mistake at the gym. "Which workout plan should I use?" Any plan. Any of them.

iamkroot 8y ago
I've always said that the best workout plan is the one that you'll actually do.