3 ms·
My threat model isn't super high profile, so no? Partly given 2FA, but more importantly the fact that I check my email pretty frequently (most of them will be
by jrm4 5y ago
My threat model isn't super high profile, so no?
Partly given 2FA, but more importantly the fact that I check my email pretty frequently (most of them will be like "hey, someone's trying to change your password, is it you?), I don't think that's a fair comparison.
- bombcar 5y agoBe aware that anyone who has access to your email can also delete the "we changed your password" emails. Properly engineered a cloud-based password storage system should be at least as secure as email, if not moreso (and I believe 1password has it engineered that way).
- jrm4 5y agoSure -- except that the deeply centralized password storage system is a MUCH more attractive target; you've put all the goodies in one place, which is part of my entire point. There is a WHOLE LOT of incentive to try to hack 1Password and far less to try to hack my dinky email, or even, e.g. gmail to try to find what you're looking for as the hacker.