Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: How comfortable do you feel using cloud-based password managers?

news.ycombinator.com

Post reply on HN
Print view View original

141–150 of 199 posts

Re: Ask HN: How comfortable do you feel using cloud-based password managers?

#141

Post by jwr »

kennu wrote: post #93

1Password has always offered the best usability for me. Many other password managers (eg LastPass) have failed, for instance, to work with the AWS sign in page and some other tricky websites. 1Password UX is also well polished in other ways and is nice to use. I consider this kind of good usability to significantly increase my quality of life, since I login to various online services all the time and I want to elimin…

I've been pretty happy with 1Password for the last 3 years or so. The only point where I had a trust problem was when they introduced subscriptions (which is fine, I happily pay software subscription fees for good software, because that way the software is sustainable), but migration involved creating an online account and entering my secret password in my browser. That is something I always find scary: yes, they do assure me that it's just locally-run JavaScript, and the password never leaves my computer, but still.

In other words, I am somewhat scared, but the usability is so fantastic that I find the compromise reasonable, especially with 2FA (TOTP or U2F using YubiKey).

Now, if only Apple finally learned that prompting me for my Apple ID password in a modal popup whenever they feel like it, without the ability to auto-fill is a no-no...

Re: Ask HN: How comfortable do you feel using cloud-based password managers?

#142

Post by ceejayoz »

FreeHugs wrote: post #140
dancek wrote: post #71

You could say I put a lot of trust in Google, as I use the built-in password manager in Chrome. My rationale is the following: 1. My browser vendor can access my browser passwords anyway. 2. It's better to trust fewer vendors and pieces of software. 3. Copying passwords to clipboard is awfully insecure. 4. Trying to remember all passwords is also awfully insecure. I do not save any money-related passwords. I do dream…

3. Copying passwords to clipboard is awfully insecure. Not that I am aware of. What would make it insecure?

If you log in to AWS, then visit another site, your password is still on the clipboard. 1Password clears it out after ~30 seconds, IIRC, but it's still a bit of a risk.

Re: Ask HN: How comfortable do you feel using cloud-based password managers?

#143

Post by Leace »

BozeWolf wrote: post #134
nickjj wrote: post #49

I would never trust them, but more importantly I don't want to have to waste brain cycles thinking that the 300+ passwords I have saved could be compromised due to neglect that's out of my control. I just use https://www.passwordstore.org/ and it works great (I have 300+ passwords stored for years). It's a local command line driven password manager and it's pretty great for developer based workflows because you can s…

Does not work on mobile, right? How do you handle passwords there? Copy/paste between mac/iphone (might be insecure). And what if you did not bring your laptop?

Works on mobile. See countless comments here.

Re: Ask HN: How comfortable do you feel using cloud-based password managers?

#145

Post by jonathankoren »

19ylram49 wrote: post #138
FussyZeus wrote: post #129

Earlier quoted context omitted.

I love 1Password but haven't upgraded specifically because of the cloud service. All my stuff is already in Dropbox, and 1Password essentially came to it's old users touting a subscription fee to a functionally identical service. Why am I paying them every month to store my passwords when I'm already storing them myself? I'm sure I'll have to cave at some point what with the ongoing march of progress, but it leaves a…

I’m actually on the same boat, and I haven’t been able to upgrade to any of the newer releases of 1Password due to this. I feel exactly the same way. I refuse to cave though!

The only feature I’m missing with my old old 1Password is Have I Been Pwned integration, and that seems iffy now that it’s shutting down.

Software has switched to a subscriptions, but They don’t offer any benefit over the original purchase price structure to users. It feels like the ultimate admission that the product has reached maturity, and so it’s time to rent seek.

I’ve considered switching to Bitwarden or Firefox Lockwise, but honestly, 1Password still works, and so there isn’t much impetus to migrate.

Re: Ask HN: How comfortable do you feel using cloud-based password managers?

#147

Post by bbulkow »

I use 1pass like many here, but don't use the cloud service and am not happy doing so. My passwords are in a file which i share using a file share service, but i know it is all encrypted with my master password, which is my primary live off defense.

I would be interested in hearing how many passwords / accounts people have. I am well above 100, i think in the 200 range, so the idea that i could have different passwords, and remember them, is just silly. Password management has to happen, and the best way i can think is to store a majority in a very well encrypted file.

I do memorize a few key accounts.

Re: Ask HN: How comfortable do you feel using cloud-based password managers?

#149

Post by lgunsch »

spondyl wrote: post #9

I've used pretty much every password manager under the sun at one point or another. Lastpass, 1Password, Bitwarden, Dashlane, Remembear, KeePass(X) and I've finally settled on regular ol' pass. I never really understood how it "syncs" but it's just git! Push and pull to update on every device. I use a private repo since site names are still metadata. You could put the whole directory tree in a tomb as well but that e…

I used LastPass specifically because 1Password does not work on Linux. At least up till a year ago, which was the last time I checked, the 1Password extension doesn't run on Linux.
Post reply on HN