3 ms·
I have many devices, and many passwords. Using a cloud sync password manager allows me to follow best practices in having complex, unique passwords for each ac
by stetrain 3y ago
I have many devices, and many passwords.
Using a cloud sync password manager allows me to follow best practices in having complex, unique passwords for each account.
Data breaches and password leaks at random websites are a much more common attack vector than all of your encrypted passwords being exposed via a password manager.
> Through these hackers can generally get passwords of all users of these services
I'm not sure that there's really evidence or history to back this up. As far as I know even the LastPass data breaches only exposed encrypted passwords, not decrypted ones.
For companies, the benefit is that shared credentials can be distributed to employees without people pasting them in slack, email, or other insecure services.
That access can be revoked by policy if say an employee leaves the company, and new credentials can be generated for all the employees who remain.
- pacifika 3y agoSome lastpass accounts had salts of 1 iterations unfortunately. Source: via security now podcast. Also various online sources https://www.reddit.com/r/Lastpass/comments/106p7le/comment/j3iumux/ https://www.reddit.com/r/Lastpass/comments/106p7le/comment/j... In the early days they did not set a minimum length and they did not increase users settings once it became clear it wasn’t enough.