6 ms·
Nope. Keeping my secrets store on someone else's computer is simply not compatible with my threat model. Yes, they say it is encrypted, and I believe them and
by _jal 5y ago
Nope.
Keeping my secrets store on someone else's computer is simply not compatible with my threat model.
Yes, they say it is encrypted, and I believe them and believe they're competent.
But competent people write vulnerable code all the time, disastrously bad hires happen (see Unifi), and companies go bad. You can't un-disclose information stored with them, only laboriously invalidate it.
- politelemon 5y agoAgree. Moving from one proprietary online solution to another proprietary online solution isn't the answer.
- FearlessNebula 5y agoHow do you sync your passwords across all of your machines? Do you self host your passwords on your own server? Do you manually sync?
- miked85 5y agoNot OP, but I use the standalone version of 1Password + Resilio Sync.
- dylan604 5y ago1Pass has the ability to sync via WiFi, Dropbox, iCloud, etc. I only use the WiFi as the other options are still cloud platforms I don't trust.
- cshepher 5y agoThese have all been removed in 1password 8. It is cloud-only, subscription-only.
- karmakaze 5y agoWhat's your personal threat model? I'm always trying to balance the risk of a party focused on security vs the minimal effort I'm likely to put into it. I don't want to be a story about the guy that lost their password to a wallet or anything else important. I used to be able to reliably remember complex passwords reliably but finding that's no longer the case, now only shorter intermittently used ones based on how often I have to use "reset password".
- DougN7 5y agoI’ve decided that besides a password manager, all of my passwords will also have a number at the end, like 8 (simple, easy to append manually in a password field. Now the password manager has to get defeated AND my own small personal salt value will have to be known.
- argestes 5y agoNow we know
- willis936 5y agoNow you know that there is some sort of salt. That isn't helpful to an attacker trying to cryptographically crack a password if they already have the password database.
- yawaworht1978 5y agoGood idea, I would add a yubikey to that, for an additional step.
- lunarboy 5y agoThis is a good idea that's never occurred to me. I guess you could also consider it like having one password for all your accounts, except salted with some random string from your password manager
- mongol 5y agoWill it always be 8? Or will it vary?
- junon 5y ago1password has been audited a bazillion times. They're E2EE. They're cheap. Your master passwords aren't stored on their servers. Neither is your key information. The only thing I pay for is the managed hosting, but in theory it's not much different than anything else properly designed (e.g. bitwarden) aside from the obvious things, such as OSS-ness. The only relevant CVEs are relatively mild compared to LastPass. Give them some credit.
- throw10920 5y ago> Your master passwords aren't stored on their servers. Neither is your key information. ...and, those are the only things that really matter for an attacker. Encrypted data (assuming reasonably strong encryption) is useless without the key.
- postalrat 5y agoSome encrypted data is worthless. Some isn't. Depends on what value it has when down the road the encryption is broken.
- tatersolid 5y agoIf AES being broken is in your personal threat model, you have far more to worry about than passwords.
- postalrat 5y agoWhat if its broken in 10 years? Or in 50 years? Eventually it will be.
- tatersolid 5y agoI’d wager you could survey 100 cryptographers and at least 90 would say the AES-256 primitive itself will never be practically broken, even by large-scale quantum computers. Related-key attacks aren’t realistic or practical.
- tenken 5y agoYour personal infrastructure is likely much more volatile than some Expert company. Unless of course you happen to be an industry expert ...