3 ms·
My bigger worry is less getting hacked and more losing access to the password manager: If I use an online one, I'm once again dependant on a third party that ca
by xg15 3y ago
My bigger worry is less getting hacked and more losing access to the password manager: If I use an online one, I'm once again dependant on a third party that can change their terms (or have an outage or get hacked) tomorrow; if I use an offline one, I have to manage a password database which has to be backed up, synchronized across devices, etc.
If I use a new device, I cannot log into any account if I don't have an old device at hand from which to copy the password file.
All that seems a lot more risk and hassle than choosing 2 or 3 good passwords (correct horse etc), then making variants that you can remember for each site.
- fragmede 3y agoOffline password managers offer sync features that make that issue more tractable. Better than having using the password variant scheme, anyway.
- michaelmrose 3y agoIf I were nefarious I would attempt to login to websites with variations of pwned passwords and you would be one pwned trivial bullshit site away from having your entire digital life pwned. This form of security is worse than nothing because it gives a false assurance of security AND a false concept of ergonomics in one go. 99.9% of people are going to be unable to remember a reasonable number of variants that aren't trivially deterministic and once things are very similar to another its increasingly easy to confuse them. You can sync your encrypted password vault between local devices and a remote resource which has access to the vault but not the key for same. At that point is very very hard to get pwned or lose access to anything. This was a solved problem 20 years ago.