6 ms·
I access my manager from my phone and type them in. I would never install my LastPass on a public computer even if they let me.
by nickthegreek 7y ago
I access my manager from my phone and type them in. I would never install my LastPass on a public computer even if they let me.
- Sohcahtoa82 7y agoAnd then you've got your phone open, displaying your password to shoulder surfers, for as long as it takes to type in your password.
- cbm-vic-20 7y agoI have a hard enough time typing 4mfkD.Q.27cC8,'@eG}a4{\* , I am very much not worried about a "shoulder surfer" either seeing the cleartext password on my tiny phone screen, or watching all of those keystrokes without me noticing them.
- naniwaduni 7y agoI'd be more concerned about it getting caught on camera.
- diamondo25 7y agoThey used to have a mobile page you could login to. It was really plain but it did what it did best: provide an easy and clean way to access your passwords when you are somewhere. It was something like https://lastpass.com/mobile https://lastpass.com/mobile ...
- fluidcruft 7y agoIt would be really cool if you could plug your phone in and it appeared as a USB keyboard device and you could "type" the password from the password manager that way without ever giving the computer access to anything except that password. Maybe some sort of simple USB dongle (like a yubikey) could be fed by the phone via bluetooth or nfc to do this?
- peteretep 7y agoIt would be even cooler if I could open an app on my phone, point it at a QR code on screen, and not have anything else bother me
- trillic 7y agoThis is (sorta) how SQRL works. https://www.grc.com/sqrl/sqrl.htm https://www.grc.com/sqrl/sqrl.htm
- fragmede 7y agoWhich, to be fair, is close to how it works inside Apple's walled garden. Logging into iCloud on a new computer will cause the iPhone attached to that account to pop-up a "confirm login" dialog, so the second factor for login is as unobtrusive as possible.
- tomp 7y agoNo you still need a password, which also makes it insecure on a public computer (where keyloggers might be installed). Instead, the better solution would be, you point your phone to a QR code on the computer screen, press “confirm”, the computer is magically logged in, until you then press “log out” on your phone and the computer is logged out.
- tatersolid 7y agoYou’ve just described SQRL
- iudqnolq 7y agoGoogle does that without needing a QR code if you have a recent Android and haven't enabled 2FA
- nicky0 7y agoHow does the communication from the computer to the phone work?
- bashinator 7y agoIt would be even cooler if there were no possible vector for the computer to then compromise your phone, but I don't really see that happening.
- lostlogin 7y agoThat gets old very fast too though. Copying a long and complicated password manually is pretty grim.
- xmprt 7y agoPardon my ignorance but if you're worried about the computer being compromised so that they could somehow access your LastPass, why would you even use it for any authenticated work in the first place?