4 ms·
Because my passwords are stored in the cloud but they are only decrypted on my PC. If a nation state or another attacker gets into the password manager I use, t
by geocrasher 5y ago
Because my passwords are stored in the cloud but they are only decrypted on my PC. If a nation state or another attacker gets into the password manager I use, they have my encrypted passwords just the same as if they rooted some Linux box I have an account on. The stakes are roughly the same.
A passsword manager (PM) makes random passwords easier. A PM keeps me from re-using passwords. A PM gives me a relatively secure place to store vital information, and it also lets me use it on multiple computers and stays in sync.
Do I trust them implicitly with everything? No. That would be foolish. It's a calculated risk, and the benefits outweigh the risks.
- hdjjhhvvhga 5y ago> they are only decrypted on my PC. The point is, why do you believe it's true?
- mp3il 5y agoBecause you can see their source code and monitor the network requests when using them…?
- TillE 5y agoWhy do you trust any software running on your computer? Your password manager is no more likely to have a malicious backdoor than any other program.
- aborsy 5y agoIt’s more likely indeed. Nobody cares about my editor.
- simonw 5y agoBecause if 1Password (to pick an example) were to be found to NOT be using encryption sensibly, the bad publicity would likely sink their company. Security researchers pay a lot of attention to password managers.
- throwawayffffas 5y agoI would say the stakes are lower if they hack the password manager. If they hack your device they can get them unencrypted when you decrypt them. If they hack the password manager database they will only get encrypted data.