4 ms·

FD I work for a password manager...but I would still think password managers are better even if I didn't. 1) Password managers have security qualities built in

FD I work for a password manager...but I would still think password managers are better even if I didn't. 1) Password managers have security qualities built into them, example forced logoff after X amount of time. Someone who leaves their email up is still leaving themselves available for an account theft. The password requires a key to decrpyt. This isn't the case for email 2) Email is not meant to be secure and attempts to do so have gone pretty badly. A lot of the big email providers are leaps and bounds ahead of where they were 5 years ago but email as a whole is still broken. I think this is really cool and has a lot of potential, but these things still need some work. You probably shouldn't be rolling this out on things that require a high level of security.

thesumofall 12y ago
Yes, password managers are absolutely the better solution, if we can convince every person to use one :-)
- robomartin 12y ago
  How about a review of the top password managers. I've been using Keeper but the last software update spooked me (couldn't access db). Thinking about migrating to LastPass. Ideally want to store more than just passwords. For example, images of personal and business documents.
netcan 12y ago
Would it be better if password managers were built into devices in the first place, laptops, phones, etc.?
- thisishugo 12y ago
  OS X and iOS have this, it's called Keychain, and it even works cross-device[0] totally securely[1]. Safari recently (I can't remember when) started suggesting passwords, too. Being built into the OS makes it an order of magnitude more likely to be used than a third party application, in my opinion. [0] http://support.apple.com/kb/ht5813 http://support.apple.com/kb/ht5813 [1] i.e. Apple (claims it) can't access your passwords, despite syncing them across devices.
jberryman 12y ago
1 seems completely orthogonal to the issue of authentication, and I'm not sure what you mean by 2; basically every site on the internet is built on the premise that your email is secure, and again I don't see how password managers are relevant here.
- steakejjs 12y ago
  Password managers are a better solution to prevent people from memorizing a lot of passowrds....Copied straight from the article "there is no risk of users reusing passwords"......That is what they have to do with this conversation. 1) isn't completely orthogonal to authentication. Good security products need to help you maintain good OpSec. Pretty much all password managers have features that try to help users maintain good OpSec and cut down on the mistakes they can make.

thesumofall 12y ago

Yes, password managers are absolutely the better solution, if we can convince every person to use one :-)

robomartin 12y ago
How about a review of the top password managers. I've been using Keeper but the last software update spooked me (couldn't access db). Thinking about migrating to LastPass. Ideally want to store more than just passwords. For example, images of personal and business documents.

netcan 12y ago

Would it be better if password managers were built into devices in the first place, laptops, phones, etc.?

thisishugo 12y ago
OS X and iOS have this, it's called Keychain, and it even works cross-device[0] totally securely[1]. Safari recently (I can't remember when) started suggesting passwords, too. Being built into the OS makes it an order of magnitude more likely to be used than a third party application, in my opinion. [0] http://support.apple.com/kb/ht5813 http://support.apple.com/kb/ht5813 [1] i.e. Apple (claims it) can't access your passwords, despite syncing them across devices.

jberryman 12y ago

1 seems completely orthogonal to the issue of authentication, and I'm not sure what you mean by 2; basically every site on the internet is built on the premise that your email is secure, and again I don't see how password managers are relevant here.

steakejjs 12y ago
Password managers are a better solution to prevent people from memorizing a lot of passowrds....Copied straight from the article "there is no risk of users reusing passwords"......That is what they have to do with this conversation. 1) isn't completely orthogonal to authentication. Good security products need to help you maintain good OpSec. Pretty much all password managers have features that try to help users maintain good OpSec and cut down on the mistakes they can make.