6 ms·

I mostly agree and I do use one. You only need read the whole thread however to see reasons why this would sometimes not be enough: sometimes the password mana

I mostly agree and I do use one. You only need read the whole thread however to see reasons why this would sometimes not be enough: sometimes the password manager does not auto-fill, so the user can think it's one of those cases, or they're on mobile and they don't have the extension there, or... As a matter of fact, he does use one, that didn't save him, see: https://news.ycombinator.com/item?id=45175125 https://news.ycombinator.com/item?id=45175125

eviks 1y ago
> sometimes the password manager does not auto-fill So pick one that does? That's like its top 2 feature > he does use one He doesn't since he has no autofill installed, so loses the key security+ convenience benefit of automatch
- y1n0 1y ago
  He didn't say it didn't have the autofill feature, he said sometimes it doesn't work. I've experienced this pretty routinely with two different managers.
  - eviks 1y ago
    Yes he did, read again > I was mobile, the autofill stuff isn't installed
- acdha 1y ago
  > So pick one that does? That's like its top 2 feature Still doesn’t work 100% of the time, because half of the companies on earth demote their developer time to breaking 1995-level forms. That’s why every popular password manager has a way to fill passwords for other domains, why people learn to use that feature, and why phishers have learned to convince people to use that feature. WebAuthn prevents phishing. Password managers reduce it. This is the difference between being bulletproof like Superman or a guy in a vest.
  - sunaookami 1y ago
    Then good password managers will still show you only the logins for that domain. If the login is on another domain then you would have saved it anyways when first logging in/registering and if the site moved then you can get suspicious and check carefully first.
    - voxic11 1y ago
      What are good password managers for chrome and Firefox on Android?
      - Ghoelian 1y ago
        Personally a big fan of 1Password. On the topic of autofill, the only website it sometimes won't fill is Reddit, which you know, whatever, I never go there anymore anyway. As a developer I also love their ssh and gpg integrations, very handy. I do get it for free from work, but if I had to choose one myself I'd have to pay for I'd probably still pick 1Passwrod.
        mdaniel 1y ago
        > I do get it for free from work, but if I had to choose one myself I'd have to pay for I'd probably still pick 1Passwrod. I wanted to highlight that "getting it for free from work" isn't a sweetheart deal offered just to OP, but a feature of 1Password for Teams, meaning all employees of a business that uses 1Password automatically have a Family license for use at home https://support.1password.com/link-family/ https://support.1password.com/link-family/ And, for clarity, it's merely a financial relationship: the business cannot manage your Family account, cannot see its contents, and if you have a separation event you can retain the Family account forever in a read only capacity or you can take over the payment (or, heh, I presume move to another employer that also uses 1Password) and nothing changes for your home passwords
      - sunaookami 1y ago
        I use selfhosted Bitwarden (Vaultwarden).
- voxic11 1y ago
  Mobile autofill requires you to make other security compromises.
  - eviks 1y ago
    Which ones, and how do they compare to this one?

eviks 1y ago

> sometimes the password manager does not auto-fill So pick one that does? That's like its top 2 feature > he does use one He doesn't since he has no autofill installed, so loses the key security+ convenience benefit of automatch

y1n0 1y ago
He didn't say it didn't have the autofill feature, he said sometimes it doesn't work. I've experienced this pretty routinely with two different managers.
- eviks 1y ago
  Yes he did, read again > I was mobile, the autofill stuff isn't installed
acdha 1y ago
> So pick one that does? That's like its top 2 feature Still doesn’t work 100% of the time, because half of the companies on earth demote their developer time to breaking 1995-level forms. That’s why every popular password manager has a way to fill passwords for other domains, why people learn to use that feature, and why phishers have learned to convince people to use that feature. WebAuthn prevents phishing. Password managers reduce it. This is the difference between being bulletproof like Superman or a guy in a vest.
- sunaookami 1y ago
  Then good password managers will still show you only the logins for that domain. If the login is on another domain then you would have saved it anyways when first logging in/registering and if the site moved then you can get suspicious and check carefully first.
  - voxic11 1y ago
    What are good password managers for chrome and Firefox on Android?
    - Ghoelian 1y ago
      Personally a big fan of 1Password. On the topic of autofill, the only website it sometimes won't fill is Reddit, which you know, whatever, I never go there anymore anyway. As a developer I also love their ssh and gpg integrations, very handy. I do get it for free from work, but if I had to choose one myself I'd have to pay for I'd probably still pick 1Passwrod.
      - mdaniel 1y ago
        > I do get it for free from work, but if I had to choose one myself I'd have to pay for I'd probably still pick 1Passwrod. I wanted to highlight that "getting it for free from work" isn't a sweetheart deal offered just to OP, but a feature of 1Password for Teams, meaning all employees of a business that uses 1Password automatically have a Family license for use at home https://support.1password.com/link-family/ https://support.1password.com/link-family/ And, for clarity, it's merely a financial relationship: the business cannot manage your Family account, cannot see its contents, and if you have a separation event you can retain the Family account forever in a read only capacity or you can take over the payment (or, heh, I presume move to another employer that also uses 1Password) and nothing changes for your home passwords
    - sunaookami 1y ago
      I use selfhosted Bitwarden (Vaultwarden).
voxic11 1y ago
Mobile autofill requires you to make other security compromises.
- eviks 1y ago
  Which ones, and how do they compare to this one?