4 ms·
I have a real issue with all of them because they all have access to your passwords even if they tell you that it's not the case. You cannot control anything t
by Grimeton 2y ago
I have a real issue with all of them because they all have access to your passwords even if they tell you that it's not the case.
You cannot control anything that happens inside their apps and when you add a password that is then send to their servers 'encrypted' and is then 'decrypted' on another device that means that the key to en-/decrypt the password moved along with it.
So in the end they have the password to your passwords and that's an issue for me. I don't want that and I wouldn't want anybody else to be in that situation because besides abuse there's also always the option of data leakage and then you're really screwed.
- davidfiala 2y agoThis is entirely false: Password managers and their hosting do not have access to your passwords. Comment author may have misunderstood how respectable password managers work, and I'd suggest they Google for more details. The master password you use to unlock the manager is used to encrypt the passwords themselves along with other metadata. It is the strength of the master password that guards the passwords within. Indeed, you are trusting their software to be correct and safe like you would any other software and vendor.
- Grimeton 2y agoIF and that's a big if, IF the master password is used to encrypt the password then sharing passwords between users would only be possible if every user would have the master password to the encrypted password they want to use. IF that's really the case then the whole thing is pointless and you can just revert to a KeePass file on a web share or something similar. Also decrypting the passwords in the web interface is either done in Javascript which would open the master password to all kinds of attacks or it's done server side which means they have the password.