4 ms·
>After all, what's the alternative? Use keepass and don't upload your password in cleartext to someone who just tells you they are encrypted. Trust someone el
by nix23 4y ago
>After all, what's the alternative?
Use keepass and don't upload your password in cleartext to someone who just tells you they are encrypted.
Trust someone else with your passwords is 99% the weakest link.
>Your risk of a targeted attack might be lower with offline storage,
We don't talk about targeted attacks, but a breach of every user who uses the service, are you from marketing? Because you really try to justify uploading your passwords to a 3rd party with proprietary software is a good thing, are you absolutely out of your mind??
If you have told anyone in the year 2000 to upload all your passwords to a service, in clear-text but who tells you it's absolutely safe and everything gets encrypted, you would have been laughed out of the room, so you should today.
>to self-host their password manager.
Gosh, are we really that far from commonsense that we think we have to host a personal password manager??? It's an encrypted file basta. It's like unix never existed and now we need an oracle database and php to "host" our 20 passwords...bravo. Hey why not install github-enterprise so we can use git?
- dns_snek 4y agoFeel free to respond if you're willing to address any of my points in good faith. I've made it abundantly clear I only believe in audited, well behaving and open source solutions. I'm not advocating for sending your passwords off to an unknown entity in clear text. My point about self-hosting password managers was aimed at a relatively common (but in my opinion, unwise) advice for people to just host their own instances of vaultwarden[1], but it also applies to file-based storage such as KeePass. [1] https://github.com/dani-garcia/vaultwarden https://github.com/dani-garcia/vaultwarden