6 ms·

For passwords the browser's built in management is inferior to password managers. I use 1Password (most polished) and there's also Bitwarden (hosted, but open

For passwords the browser's built in management is inferior to password managers. I use 1Password (most polished) and there's also Bitwarden (hosted, but open source) and others. And I use my password manager every day, so if there's a cost associated, it's worth it.

nkozyra 7y ago
> For passwords the browser's built in management is inferior to password managers. Can you expound? After years of using various pw managers I found it being embedded in the browser very useful.
- nashashmi 7y ago
  One type of incident I came across repeatedly was the browser would not recognize new password setup after password reset. Also found that 2fa systems were being confused for new password accounts. I agree password managers like last pass fill this void quite nicely. But are not serviced to run on mobile without payment.
- Majestic121 7y ago
  Not the parent, but for my own use case, I use password managers for things outside of the browser (office door code, steam, this kind of thing). It might be possible to enter those in the password manager of the browser, I never actually checked, but in any case that's why I use an out of browser password manager
  - nkozyra 7y ago
    At least with chrome it's always there, you can access on mobile.
    - emayljames 7y ago
      At least on Firefox it's always there, you can access on mobile.
- jjoonathan 7y ago
  Having your passwords quickly available on every computer, every phone, every OS, and every browser is great. Browser-plugin + app password managers do all 4, while password managers provided by the OS or browser typically fail at one of those. They fail hard, too, by making it difficult to manually extract passwords when you need to. They also tend to lack features like password generation, note storage, etc. It's a completely different experience, really.
  - kwhitefoot 7y ago
    > by making it difficult to manually extract passwords Not true for Firefox. Just go the privacy settings, forms, saved logins.
    - crumpets 7y ago
      That’s difficult for a common workflow. Going into “settings” for a password is as goofy as going into settings to look at your calendar.
      - Gracana 7y ago
        What common workflow requires accessing usernames and passwords manually?
        iopq 7y ago
        When the URL of the login form changes, or Firefox doesn't see it, or you need to log in to a mobile app
    - nkozyra 7y ago
      Similarly easy for Chrome - Settings -> Passwords then once OS password entered you can see each.
  - arianvanp 7y ago
    Euhm the firefox password manager syncs between devices and even has a standalone app https://lockwise.firefox.com/ https://lockwise.firefox.com/ Edit: Though Lockwise is relatively new, and currently opt in. And misses features like importing passwords bulk from other password managers
- dtroode 7y ago
  Recently I've restored my iPhone and lost all of my passwords in Safari. Now I use LastPass
mathgeek 7y ago
> For passwords the browser's built in management is inferior to password managers. This is a good thing. Browsers should be good at browsing. Password managers should be good at managing passwords. The two should have API’s as necessary to interact so that the user can choose what’s best for them.
- Spivak 7y ago
  Technical differences aside, why is it a good thing that the password manager shipped with Firefox isn't as good as most 3rd party password managers? It seems odd to prefer that software be bad. Lockwise, which admittedly requires an add-on but integrates with the built-in password manager, I think is pretty on par with its contemporaries.
  - ghettoimp 7y ago
    FWIW. I think keeping the password manager separate from the browser makes wonderful sense. - There are many times you need a password when you are not in a browser. For instance, on my phone where I don't even have FF installed, my bank's app can still get its password filled in automatically with LastPass. - Using a separate password manager means you can use multiple browsers with no loss of password access. On my laptop I regularly use both Chrome and Firefox, and I have access to my passwords in both. On my phone, I can use my passwords from Safari. I may be biased. My wife and share a LastPass account for all of our passwords. We have so many accounts, I can't imagine managing it any other way. Having access to the passwords on all our devices is really great.
vinay_ys 7y ago
Firefox is investing into Lockwise (lockbox?) https://lockwise.firefox.com https://lockwise.firefox.com I feel they are spreading themselves too thin. Instead they could do everything they can to push WebAuthn with support for on-device Secure Enclave (without needing an independent hardware key) so that everyone can benefit from having as close to a separate physical key as possible. Besides the browser itself still has a lot of work to do. Apparently they had a known remote code execution vulnerability for 2 months waiting to be fixed. That is quite concerning and gives pause while deciding if we should make Firefox our primary browser.

nkozyra 7y ago

> For passwords the browser's built in management is inferior to password managers. Can you expound? After years of using various pw managers I found it being embedded in the browser very useful.

nashashmi 7y ago
One type of incident I came across repeatedly was the browser would not recognize new password setup after password reset. Also found that 2fa systems were being confused for new password accounts. I agree password managers like last pass fill this void quite nicely. But are not serviced to run on mobile without payment.
Majestic121 7y ago
Not the parent, but for my own use case, I use password managers for things outside of the browser (office door code, steam, this kind of thing). It might be possible to enter those in the password manager of the browser, I never actually checked, but in any case that's why I use an out of browser password manager
- nkozyra 7y ago
  At least with chrome it's always there, you can access on mobile.
  - emayljames 7y ago
    At least on Firefox it's always there, you can access on mobile.
jjoonathan 7y ago
Having your passwords quickly available on every computer, every phone, every OS, and every browser is great. Browser-plugin + app password managers do all 4, while password managers provided by the OS or browser typically fail at one of those. They fail hard, too, by making it difficult to manually extract passwords when you need to. They also tend to lack features like password generation, note storage, etc. It's a completely different experience, really.
- kwhitefoot 7y ago
  > by making it difficult to manually extract passwords Not true for Firefox. Just go the privacy settings, forms, saved logins.
  - crumpets 7y ago
    That’s difficult for a common workflow. Going into “settings” for a password is as goofy as going into settings to look at your calendar.
    - Gracana 7y ago
      What common workflow requires accessing usernames and passwords manually?
      - iopq 7y ago
        When the URL of the login form changes, or Firefox doesn't see it, or you need to log in to a mobile app
  - nkozyra 7y ago
    Similarly easy for Chrome - Settings -> Passwords then once OS password entered you can see each.
- arianvanp 7y ago
  Euhm the firefox password manager syncs between devices and even has a standalone app https://lockwise.firefox.com/ https://lockwise.firefox.com/ Edit: Though Lockwise is relatively new, and currently opt in. And misses features like importing passwords bulk from other password managers
dtroode 7y ago
Recently I've restored my iPhone and lost all of my passwords in Safari. Now I use LastPass

mathgeek 7y ago

> For passwords the browser's built in management is inferior to password managers. This is a good thing. Browsers should be good at browsing. Password managers should be good at managing passwords. The two should have API’s as necessary to interact so that the user can choose what’s best for them.

Spivak 7y ago
Technical differences aside, why is it a good thing that the password manager shipped with Firefox isn't as good as most 3rd party password managers? It seems odd to prefer that software be bad. Lockwise, which admittedly requires an add-on but integrates with the built-in password manager, I think is pretty on par with its contemporaries.
- ghettoimp 7y ago
  FWIW. I think keeping the password manager separate from the browser makes wonderful sense. - There are many times you need a password when you are not in a browser. For instance, on my phone where I don't even have FF installed, my bank's app can still get its password filled in automatically with LastPass. - Using a separate password manager means you can use multiple browsers with no loss of password access. On my laptop I regularly use both Chrome and Firefox, and I have access to my passwords in both. On my phone, I can use my passwords from Safari. I may be biased. My wife and share a LastPass account for all of our passwords. We have so many accounts, I can't imagine managing it any other way. Having access to the passwords on all our devices is really great.

vinay_ys 7y ago

Firefox is investing into Lockwise (lockbox?) https://lockwise.firefox.com https://lockwise.firefox.com I feel they are spreading themselves too thin. Instead they could do everything they can to push WebAuthn with support for on-device Secure Enclave (without needing an independent hardware key) so that everyone can benefit from having as close to a separate physical key as possible. Besides the browser itself still has a lot of work to do. Apparently they had a known remote code execution vulnerability for 2 months waiting to be fixed. That is quite concerning and gives pause while deciding if we should make Firefox our primary browser.