4 ms·

You mean when using "sign in with" and then using a shitty password for your social media account? If you use e-mail and password with a good password manager,

You mean when using "sign in with" and then using a shitty password for your social media account? If you use e-mail and password with a good password manager, that runs locally on your device and generate good random passwords, it is unlikely you will end up on haveibeenpwned, and even if one website does shit, the blast radius is only one account on one website.

bjourne 8mo ago
You'll still have your e-mail address exposed, which you may not want if it is to some random porn site. Moreover, password managers do not work if you use multiple devices for log in, which most people actually do.
- Sharparam 8mo ago
  I use my password manager across multiple devices daily. Apparently it has not been working without me noticing it?
  - bravetraveler 8mo ago
    I assume they're thinking about the 'offline' style where one would shuffle a database file and probably resolve conflicts. There's an app/extensions nowadays, man! I don't even bother with a VPN, just occasionally push a 'sync' button on the roaming devices [when they return to LAN]. DB transactions [new credentials] averages ~0 per month... but there's plenty of capacity. Works extremely well.
    - quadruple 8mo ago
      The truth is that even with KeePassXC, I just really do not notice stale passwords across devices. It's just really not a huge deal for me personally. Maybe it is for normal people. I sync my databases maybe once a year if I'm lucky.
      - palata 8mo ago
        Same here. I use pass, and I just don't create/update passwords that often. And synchronising is very easy (it's a git repo).
      - bravetraveler 8mo ago
        Right, that's what I was trying to emphasize. Rare syncs are totally fine here, too. I try to keep a routine but tend to slip. If not 'with my usual device' there's a tiny number of accounts I even need. They rarely change so the 'cache' is usually suitable. If not, the restriction is always short-lived.
  - bjourne 8mo ago
    ... And how do you access the passwords that password manager manages?
    - palata 8mo ago
      With the "password manager" program? I have one on my desktop and one on my smartphone. How do you expect to access the passwords that the password manager manages?
      - bjourne 8mo ago
        ... Can everyone in the world ready our passwords or are they "protected" somehow?
        palata 8mo ago
        I am confused. You say: > Moreover, password managers do not work if you use multiple devices for log in I use a password manager with multiple devices, and it works. And yes, my passwords are "protected", that's the job of the password manager.
        zelphirkalt 8mo ago
        I am not sure, whether you are trying to get at something specific, but will interpret the question in good faith: A classical password manager reads an encrypted database. In theory, you could upload your password database (usually just one file) anywhere, and wouldn't need to worry, assuming, that you chose a sufficiently long password for decryption, and assuming, that the encryption does not have weaknesses, which would allow an attacker to decrypt it without the password. In practice, of course you still wouldn't upload your password file to a public place, to reduce risks in the future. But anyway, the idea is, that only you know the master password for the encrypted database and so no one else can read your passwords.
- flexagoon 8mo ago
  Email aliasing is a thing
- throwaway063_1 8mo ago
  If you sign in with Google, the site knows your gmail address.
- k4rli 8mo ago
  If you decide to visit such awful sites then the least you could do is not use primary email for this. I don't think it makes sense to even have a "primary email". I've completely separated work, shopping, banking, gaming etc mailboxes. Also how do password managers not work? Bitwarden syncs instantly across devices just fine.

bjourne 8mo ago

You'll still have your e-mail address exposed, which you may not want if it is to some random porn site. Moreover, password managers do not work if you use multiple devices for log in, which most people actually do.

Sharparam 8mo ago
I use my password manager across multiple devices daily. Apparently it has not been working without me noticing it?
- bravetraveler 8mo ago
  I assume they're thinking about the 'offline' style where one would shuffle a database file and probably resolve conflicts. There's an app/extensions nowadays, man! I don't even bother with a VPN, just occasionally push a 'sync' button on the roaming devices [when they return to LAN]. DB transactions [new credentials] averages ~0 per month... but there's plenty of capacity. Works extremely well.
  - quadruple 8mo ago
    The truth is that even with KeePassXC, I just really do not notice stale passwords across devices. It's just really not a huge deal for me personally. Maybe it is for normal people. I sync my databases maybe once a year if I'm lucky.
    - palata 8mo ago
      Same here. I use pass, and I just don't create/update passwords that often. And synchronising is very easy (it's a git repo).
    - bravetraveler 8mo ago
      Right, that's what I was trying to emphasize. Rare syncs are totally fine here, too. I try to keep a routine but tend to slip. If not 'with my usual device' there's a tiny number of accounts I even need. They rarely change so the 'cache' is usually suitable. If not, the restriction is always short-lived.
- bjourne 8mo ago
  ... And how do you access the passwords that password manager manages?
  - palata 8mo ago
    With the "password manager" program? I have one on my desktop and one on my smartphone. How do you expect to access the passwords that the password manager manages?
    - bjourne 8mo ago
      ... Can everyone in the world ready our passwords or are they "protected" somehow?
      - palata 8mo ago
        I am confused. You say: > Moreover, password managers do not work if you use multiple devices for log in I use a password manager with multiple devices, and it works. And yes, my passwords are "protected", that's the job of the password manager.
      - zelphirkalt 8mo ago
        I am not sure, whether you are trying to get at something specific, but will interpret the question in good faith: A classical password manager reads an encrypted database. In theory, you could upload your password database (usually just one file) anywhere, and wouldn't need to worry, assuming, that you chose a sufficiently long password for decryption, and assuming, that the encryption does not have weaknesses, which would allow an attacker to decrypt it without the password. In practice, of course you still wouldn't upload your password file to a public place, to reduce risks in the future. But anyway, the idea is, that only you know the master password for the encrypted database and so no one else can read your passwords.
flexagoon 8mo ago
Email aliasing is a thing
throwaway063_1 8mo ago
If you sign in with Google, the site knows your gmail address.
k4rli 8mo ago
If you decide to visit such awful sites then the least you could do is not use primary email for this. I don't think it makes sense to even have a "primary email". I've completely separated work, shopping, banking, gaming etc mailboxes. Also how do password managers not work? Bitwarden syncs instantly across devices just fine.