And the best part is there are solutions already that do this: https://keepass.info/
Does it work on Android or iOS?
Ask HN: Why do people use password managers?
11–20 of 77 posts
Re: Ask HN: Why do people use password managers?
#12No serious password manager with syncing stores your passwords in a way that gives them or anyone else with access access to your passwords. They are encrypted, so they need your master password.
People have multiple devices, so syncing is needed for usability.
Some password managers are basically local, but with end to end encrypted syncing. If you have to move passwords around, why not use a solution that already does it in a secure way?
Re: Ask HN: Why do people use password managers?
#13I don't use one of those services but I do use a distributed self-hosted one. Reason is I have many different computers phones and tablets. I need my passwords everywhere.
Re: Ask HN: Why do people use password managers?
#14> Obviously, this would be less convinient and wouldn't sync between devices. But would do the job.
Something that does not sync between devices does not do the job.
Re: Ask HN: Why do people use password managers?
#15I use a browser based password manager (ie 1pass, Lastpass, Internet Explorer, Chrome/Android, Apple/Safari keychain)
The major advantage when compared to a separate application (ie encrypted text document) is that the system/browser based url/context reduces Phishing, Clipboard jacking security issues.
Why does Okta exist? Primarily for their SCIM configuration (which is different and adds a level of org management)
Why do Lastpass and 1pass exist? Likely because Android/Chrome passwords weren't trusted yet and Apple keychain doesn't has as much of a consumer interface / cross platform concerns.
Re: Ask HN: Why do people use password managers?
#16> why don't people use local password managers?
I do use a local password manager, personally. The disadvantage to doing so is that I don't get autofill of passwords and have to enter them by hand. I consider that a good thing, though, because it means that I end up memorizing the 3 or 4 passwords I use the most in a couple of days after generating them.
Re: Ask HN: Why do people use password managers?
#17In most cases convenience. Sometimes, you may need to share a password one-off (ex. https://support.1password.com/share-items/) with a coworker or a friend. Setting up something like that with keepass is not really possible.
If you want to manage passwords amongst family members, it's easier to set them up with one of the cloud services compared to Keepass. You also get some level of customer support, and don't have to worry as much about when your password breaks.
I personally have set up KeePass, made sure it's backed up regularly, and even set up a WEBDAV server to access it remotely. It works great for me, but I know how everything is set up. Strongbox for mobile access is the main reason I can actually use this, and this is a paid application that not everyone is willing to pay for. Experience-wise, other mobile applications for KeePass have not compared, and I have no idea how apps for Android compare, since I set up everyone with iOS devices. Sometimes, the connection to the server gets disrupted, and I have to reconnect. Not everyone wants to do this, and can have less confidence in the other supporting infrastructure.
As much as attack vectors exist, the biggest risk is you losing access to your own passwords (there's been enough lost crypto wallets you can read about on the internet). Compared to that, a cloud based service is better for a large group of people.
Re: Ask HN: Why do people use password managers?
#18Okta isn’t a password manager. It’s an Identity Provider. I use a password manager because I have multiple devices and a cross platform solution that I can access is a straightforward solution. A local password manager like Keepass is still vulnerable to attack by a compromised system. A well architected password manager is going to not store the decryption keys on their servers and only allow the password vault to b…
> Okta isn’t a password manager. It’s an Identity Provider.
They're best known for being an identity provider but they do have a password manager product[0], which is what I think OP is referring to.
Re: Ask HN: Why do people use password managers?
#19"Obviously, this would be less convinient (sic) and wouldn't sync between devices."
You've answered your own question.
Re: Ask HN: Why do people use password managers?
#20What you're describing is more secure and I do know several people that do this, sometimes with syncing via Dropbox. But it's a battle against convenience and user experience and requires a fair amount of technical expertise to set up and use. While I _could_ teach my family to use a local password manager like keepass, it would be an uphill battle, whereas using 1Password, etc is _easy_ for them and means I reduce the number of tech support phone calls I get from my family (for context the most recent call was about fixing earthlink web email roughly a month ago).