3 ms·

Why bother with the encryption? All you need to do is put random data in the keyfile, and combine the master key and keyfile data to create your key.

• SloopJon 7y ago
  The point is to decouple the master password from the generated passwords. The file can contain as much key material as you want, so it's stronger than any password you can remember.
  • DagAgren 7y ago
    The same is true with the method I suggested.
    • SloopJon 7y ago
      Then I don't understand how you "combine the master key and keyfile data to create your key." How do you change the master password without changing the generated passwords?
• baobabKoodaa 7y ago
  Encryption allows you to change the master password without forcing you to change all site passwords. To illustrate: Scenario A: keyfile is encrypted with master password, site passwords are generated from plaintext keyfile. If the master password needs to be changed, the keyfile is simply encrypted again. The plaintext keyfile remains the same, which means all generated passwords remain the same. No need to change site passwords. Scenario B: keyfile is not encrypted, both keyfile and master password are used as inputs to generate passwords. In this scenario, any change to the master password causes all generated passwords to change. This would obviously be undesirable.
  • deleted 7y ago
    [deleted]