3 ms·
You could do it as a single encrypted text file. The UX on it is more difficult. My password manager is frictionless and secure (I currently believe, based on b
by koliber 3y ago
You could do it as a single encrypted text file. The UX on it is more difficult. My password manager is frictionless and secure (I currently believe, based on best available info).
With a single keystroke, while in a web browser where the majority of my passwords are requested, I fill in the username and the password for the site I am on.
Vs. an encrypted plain text file, it has the following advantages:
- A single keystroke in the web browser, vs. typing longer commands
- No searching through hundreds of entries. At most a small handful is shown if I have multiple logins.
- No worries about wiping my terminal scrollback buffer or forgetting to remove the temporarily-decrypted file.
- Correct password for correct site, and no thread of lookalike sites
- All devices have access to same password list, via Dropbox sync of encrypted DB files.
- Can store other structured data in addition to passwords. Even binary data like images.
- Can use is as a TOTP, but that is arguably a bad practice. It's convenient though.