3 ms·
One attack vector is consolidating all your passwords into a password manager, and then being able to unlock the password manager on your phone w/ biometrics (e
by devoutsalsa 5y ago
One attack vector is consolidating all your passwords into a password manager, and then being able to unlock the password manager on your phone w/ biometrics (e.g. face, fingerprint).
- foobarbazetc 5y agoYou still have to unlock your phone and any competent password manager makes you type the password at least once and has options for how often you have to. If someone has your phone and your phone passcode you’re kind of hosed anyway.
- devoutsalsa 5y agoWell someone can drug you and use your face while you’re passed out, but they can’t make your unconscious self share your pin code. This all assumes your attacker doesn’t think to just scare you into sharing by threatening you with a hammer. I was actually thinking more about law enforcement being the most likely to try gaining access to your phone. They can make you use your face or fingerprint, but they can’t force you to reveal your pin code.
- theshrike79 5y agoIf your threat model includes someone using drugs/violence to get your passwords, then choosing the correct password manager is the least of your problems =)
- devoutsalsa 5y agoWell the only time I’ve been mugged was by a cop, so there’s that.