2 ms·

Uhh... Why not? Generally speaking, password managers are pretty good at encrypting secrets, considering it's their only job and all.

• thomasrossi 11y ago
  basically there are tons of browser plugins which listens to your keyboard, or anyway see everything you enter in a form. One nice example was facebook color changer;P
  • mynameisvlad 11y ago
    ... And that is a problem with password managers why? It doesn't matter who enters the credit card, you or your password manager, those would still get it. So I ask again, why not?
    • thomasrossi 11y ago
      About the plugins, you are right, it's weak anyway, my bad. To better answer your question this is a paper explaining some critical vulnerabilities in the concept of password managers (let alone the implementation) http://devd.me/papers/pwdmgr-usenix14.pdf http://devd.me/papers/pwdmgr-usenix14.pdf
      • mynameisvlad 11y ago
        Your paper talks about vulnerabilities in web password managers. A subset of password managers as a whole. Most managers are desktop-based.