5 ms·

I still have no idea why people use these kinds of programs. I have no idea how companies managed to sell this security nightmare as a feature to actually seri

I still have no idea why people use these kinds of programs. I have no idea how companies managed to sell this security nightmare as a feature to actually serious people. A single point of failure. Yeah, great idea!

sbarre 5y ago
Genuinely curious, where do you store your passwords and sensitive info like SSH keys? I hear a lot of "cloud password managers are bad!" but I rarely see someone follow up with a better approach. Even better to them. I've been using a password manager for years and I've always thought I was making a good decision but then I see all these comments and I wonder if I'm missing something.
- karmajunkie 5y ago
  You're not missing anything—some people just like to grumble. I've never seen anyone come up with a reasonable alternative that isn't "rely on your own faulty memory."
  - MrYellowP 5y ago
    Okay, so you're an asshole. Let's set this straight. I don't store my passwords anywhere. I don't need to remember my passwords, they're the results of functions based on logical deduction and observation within the context of the "thing" I need the password for. And my passwords are all, without exception, beyond 10 characters.
- AndyMcConachie 5y ago
  I use KeyPassXC for almost all of my secret storage needs.
  - howinteresting 5y ago
    Do you have family or friends with whom you share passwords? 1pass excels in that situation.
  - karmajunkie 5y ago
    That's still a password manager. GP was asking what alternatives to the entire class of applications exist that provide equivalent security for unique passwords and keys
- MrYellowP 5y ago
  I don't store them anywhere. I don't need to remember my passwords, they're the results of functions based on logical deduction and observation within the context of the "thing" I need the password for. And my passwords are all, without exception, beyond 10 characters.
phantomathkg 5y ago
I still have no idea why people think password manager is not a good thing. Maybe you should read this? https://www.troyhunt.com/password-managers-dont-have-to-be-perfect-they-just-have-to-be-better-than-not-having-one/ https://www.troyhunt.com/password-managers-dont-have-to-be-p...
oldandboring 5y ago
Information security is nearly always about trade-offs and this is no exception. What you give: - a single point of failure (one complex password you memorize that locally unlocks a DB of credentials that is stored encrypted in the cloud). What you get: - all passwords are unique and complex (assuming you use a password generator, which all these tools have built-in) - the convenience of having all your passwords ready for use on any of your devices - the convenience of auto-fill - the convenience of being able to share logins e.g. a spouse or across your organization. - the convenience of being able to also store, share, and auto-fill secrets besides logins (identities, credit cards, free-text notes). Been using a password manager for 15+ years and I have never suffered fallout from the single-point of failure tradeoff, only benefits from the power and convenience I got as a result.

sbarre 5y ago

Genuinely curious, where do you store your passwords and sensitive info like SSH keys? I hear a lot of "cloud password managers are bad!" but I rarely see someone follow up with a better approach. Even better to them. I've been using a password manager for years and I've always thought I was making a good decision but then I see all these comments and I wonder if I'm missing something.

karmajunkie 5y ago
You're not missing anything—some people just like to grumble. I've never seen anyone come up with a reasonable alternative that isn't "rely on your own faulty memory."
- MrYellowP 5y ago
  Okay, so you're an asshole. Let's set this straight. I don't store my passwords anywhere. I don't need to remember my passwords, they're the results of functions based on logical deduction and observation within the context of the "thing" I need the password for. And my passwords are all, without exception, beyond 10 characters.
AndyMcConachie 5y ago
I use KeyPassXC for almost all of my secret storage needs.
- howinteresting 5y ago
  Do you have family or friends with whom you share passwords? 1pass excels in that situation.
- karmajunkie 5y ago
  That's still a password manager. GP was asking what alternatives to the entire class of applications exist that provide equivalent security for unique passwords and keys
MrYellowP 5y ago
I don't store them anywhere. I don't need to remember my passwords, they're the results of functions based on logical deduction and observation within the context of the "thing" I need the password for. And my passwords are all, without exception, beyond 10 characters.

phantomathkg 5y ago

I still have no idea why people think password manager is not a good thing. Maybe you should read this? https://www.troyhunt.com/password-managers-dont-have-to-be-perfect-they-just-have-to-be-better-than-not-having-one/ https://www.troyhunt.com/password-managers-dont-have-to-be-p...

oldandboring 5y ago

Information security is nearly always about trade-offs and this is no exception. What you give: - a single point of failure (one complex password you memorize that locally unlocks a DB of credentials that is stored encrypted in the cloud). What you get: - all passwords are unique and complex (assuming you use a password generator, which all these tools have built-in) - the convenience of having all your passwords ready for use on any of your devices - the convenience of auto-fill - the convenience of being able to share logins e.g. a spouse or across your organization. - the convenience of being able to also store, share, and auto-fill secrets besides logins (identities, credit cards, free-text notes). Been using a password manager for 15+ years and I have never suffered fallout from the single-point of failure tradeoff, only benefits from the power and convenience I got as a result.