6 ms·
> If you want to use an online password manager, I would recommend using the one already built into your browser. They provide the same functionality, and can s
by Wowfunhappy 5y ago
> If you want to use an online password manager, I would recommend using the one already built into your browser. They provide the same functionality, and can sidestep these fundamental problems with extensions.
Unfortunately, it also means I can basically never switch web browsers again, so it's an absolute non-option for me. I don't want to be locked into Chrome forever.
- jsnell 5y agoChrome's password manager has an export feature. Are you perhaps thinking of some other browser?
- Wowfunhappy 5y agoCurrently, I use Chrome on my desktop, mobile Safari on my phone, Safari on my Macbook, and Firefox on another machine. I need to sync my passwords across them!
- trollian 5y agoIf you install chrome on iOS you can use it as a password manager while you're using other apps, including Safari.
- shawnz 5y agoInteresting to know, this doesn't fully solve all the problems with this approach for me but it might be helpful for some family members. Thanks for the information
- travoc 5y agoIt’s a great way to make sure Google always has access to all of your browsing habits. That way they can serve you the most valuable advertisements.
- shawnz 5y agoI think the only reasonable way to achieve Tavis' conclusion would be for browsers to start providing actual password management APIs for extensions. I agree that locking in all my passwords with my browser vendor would be unacceptable.
- yissp 5y agoThis is something along those lines, right? https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/Native_messaging https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/Web... keepassxc's browser extensions uses it, I believe.
- shawnz 5y agoThis isn't really what I want: This allows the extension to communicate with a native app, and that's often used to implement password managers. But actually I would prefer if extensions don't use native components at all, especially password managers. What I want is an API for extensions to hook into the built-in password field detection and auto-fill mechanisms of the browser, while providing their own storage mechanism for the password data (maybe by connecting to a cloud service or something). This would avoid every password manager having to re-implement its own workflows for those things.
- jmartrican 5y agoYeah this is a cool idea. And maybe u can host it yourself, or signup to a pw manager. There should be a protocol for this stuff.
- shp0ngle 5y agoYou can export passwords from Chrome / Google passwords.
- vort3 5y agoFirefox can export passwords into CSV as well.
- wyclif 5y agoWhy wouldn't you just use `pass`?
- troyvit 5y agoThe article mentions pass and other tools that live outside the browser and then says: "Things start to go wrong when you want integration with other applications, or when you want data synchronized by an untrusted intermediary. There are safe ways to achieve this, but the allure of recurring subscription fees has attracted businesses to this space with varying degrees of competence. I’m generally skeptical of these online subscription password managers, and that’s going to be the focus of the rest of this article." So yeah the article focuses more on people who want the convenience of a password manager embedded in their browser.
- Ayesh 5y agoI use Firefox on PC and Chrome on Android. Firefox Lockwise.in Android implements an Android auto complete API to add autocompletion for passwords everywhere in Android.