3 ms·
Password managers have a few problems. Sometimes they just don't work well (e.g. banking sites that partially obfuscate your username really confuse them). Some
by creato 6y ago
Password managers have a few problems. Sometimes they just don't work well (e.g. banking sites that partially obfuscate your username really confuse them). Sometimes websites make it hard to copy and paste passwords. Apps don't always work with password managers, requiring manually retrieving the password. But mainly, password managers are inherently a bit scary as a single point of failure. You might say that OAuth has the same problem, but I think it's better because no passwords are stored anywhere (even if encrypted), and I use a hardware 2FA key for my preferred OAuth account.
I think the concern about "data grabs" is a bit overblown. I don't believe the OAuth logins that inform you of what information is being shared is lying, and if I don't like what is being shared I won't use it.
- enitihas 6y ago> banking sites that partially obfuscate your username really confuse them) Is there a bank allowing sign in by Facebook/Google? > Sometimes websites make it hard to copy and paste passwords. Yes, and that's why password managers do autofill.
- netheril96 6y ago> Yes, and that's why password managers do autofill. There are a ridiculous number of websites and apps that support neither password paste nor autofill.
- enitihas 6y agoHow does a website control autofill if the password manager extension does it? Some stupid websites do block paste, but one can use an extension to force enable paste everywhere, which IMHO is required for one's sanity.
- creato 6y agoIt seems like when websites are just janky and/or non-standard, password managers struggle to understand what fields are username/password fields, or whether it is a login vs. signup vs. password reset form, etc. To me, installing weird one-off extensions is a far bigger surface area of risk than just using OAuth.