5 ms·

Important to note that KeePass itself does not have an official browser plug in, all plug-ins are 3rd party and none have large commercial backing. Several bro

by arsome 5y ago

Important to note that KeePass itself does not have an official browser plug in, all plug-ins are 3rd party and none have large commercial backing. Several browser plug-ins are available as well as simpler solutions like a browser extension to insert the URL in the title bar and sending keystrokes to the browser to populate it.

tuwtuwtuwtuw 5y ago
That is a very good point. I am not sure that lack of official browser extension is a good thing though. I typically enjoy when software has a large community creating plug-ins, but maybe not when it comes to password managers.
- sharps1 5y ago
  Password manager browser extensions provide a large attack surface. They also break the browser sandbox. I wish there were a good solution https://lock.cmpxchg8b.com/passmgrs.html https://lock.cmpxchg8b.com/passmgrs.html
  - simpleguitar 5y ago
    > I wish there were a good solution The answer is right there in the article: Use the browser's password manager. I find Firefox's password manager + Sync a good solution, and I don't understand why people don't advocate it more. It's free and open source. Mozilla is a reputable software house with a good security team. Their revenue stream does not depend on you paying for the password manager. It doesn't even depends on monetizing your personal information. Yesterday I found it even works as a password store for all of iOS.
    - workethics 5y ago
      How do you manage passwords for things outside of the browser?
      - simpleguitar 5y ago
        On iOS, opening up saved passwords just uses firefox's password manager. On the desktop, I just open up firefox's password page. It's always running anyway. It works just like another password app.
        workethics 5y ago
        Sorry for being obtuse, but FF only allows me to put in a website to save passwords. How would I use this for an extra-browser application (steam for example)?
        simpleguitar 5y ago
        just put "steam" in the url?

by arsome 5y ago

tuwtuwtuwtuw 5y ago

That is a very good point. I am not sure that lack of official browser extension is a good thing though. I typically enjoy when software has a large community creating plug-ins, but maybe not when it comes to password managers.

sharps1 5y ago
Password manager browser extensions provide a large attack surface. They also break the browser sandbox. I wish there were a good solution https://lock.cmpxchg8b.com/passmgrs.html https://lock.cmpxchg8b.com/passmgrs.html
- simpleguitar 5y ago
  > I wish there were a good solution The answer is right there in the article: Use the browser's password manager. I find Firefox's password manager + Sync a good solution, and I don't understand why people don't advocate it more. It's free and open source. Mozilla is a reputable software house with a good security team. Their revenue stream does not depend on you paying for the password manager. It doesn't even depends on monetizing your personal information. Yesterday I found it even works as a password store for all of iOS.
  - workethics 5y ago
    How do you manage passwords for things outside of the browser?
    - simpleguitar 5y ago
      On iOS, opening up saved passwords just uses firefox's password manager. On the desktop, I just open up firefox's password page. It's always running anyway. It works just like another password app.
      - workethics 5y ago
        Sorry for being obtuse, but FF only allows me to put in a website to save passwords. How would I use this for an extra-browser application (steam for example)?
        simpleguitar 5y ago
        just put "steam" in the url?