Live data from Hacker News

Ask HN: What is your password management solution?

news.ycombinator.com

311–320 of 320 posts

Re: Ask HN: What is your password management solution?

#311

Earlier quoted context omitted.

seems like a reason to switch banks.

Don't all banks do this? Here in the UK it basically seems mandatory. Try to change your password/phone/email, they'll send you an actual letter which has a passcode you need to enter in to the website. Although mine took only a day to arrive.

No, (I'm also in the UK) I've changed a few recently-ish and in each case had only to answer some security questions and then receive a phone call/text message with a code to enter.

Re: Ask HN: What is your password management solution?

#312

Earlier quoted context omitted.

What is the cause for your paranoia about keeping your keyfile in your Dropbox? I have used and advocated this model for years with no ill effects. My Dropbox is secured by MFA, with the Dropbox password itself being a random password within the KeePass keyfile. I store the whole Keepass program for Windows inside the same Dropbox account, feel free to indicate that as a security gap. On mobile I use the KeePass2Andr…

You meant the kdbx file right? not the separate keyfile you can use to secure the kdbx file with. I think the feeling is the same as the feeling of just leaving your SSH private key "out there". Sure, it's protected with a passphrase, but I still don't want to do that. Can you trust Dropbox would never have security issues? See https://blogs.dropbox.com/dropbox/2011/06/yesterdays-authent... Didn't matter if you have…

Some people will not be satisfied so long as the keyfile, KDBX, and password reside in the same version of our shared reality, as it's still mathematically possible to decode the numbers into something they personally value.

Re: Ask HN: What is your password management solution?

#314

Earlier quoted context omitted.

Its somewhat easier in iOS 11, there's a more dedicated area in settings. Also, in iOS 11, it provides usernames and passwords within apps, which is super convenient.

What do you mean by a "more dedicated area"? I don't have a spare device to test the beta on.

On iOS11 beta, To get passwords you will go to Settings > Accounts & Passwords > App & Website Passwords [0]

[0] https://www.youtube.com/watch?v=Yy1JEyxRzIc&t=23m42s (@ 23 minutes and 42 seconds)

Re: Ask HN: What is your password management solution?

#315

Earlier quoted context omitted.

As I am currently a LastPass user, could you fill me in on the security problems?

Sure, take a look on Google's Project Zero and search for "LastPass": https://bugs.chromium.org/p/project-zero/issues/list?can=1&q... Or search the news for LastPass security issues: https://duckduckgo.com/?q=lastpass+security+issues&t=iphone&...

thanks, but all I see is 5 issues, all of which fixed (and rather quickly).

Re: Ask HN: What is your password management solution?

#316

Earlier quoted context omitted.

I understand why it makes people uncomfortable to know that they're not getting all the information I could possibly convey in a comment. I don't see how that would make it better for me to not comment at all.

I understand why you don't want to go digging up information to link, especially if using a phone. In this case, I think sharing a little truth about LastPass may benefit our community. https://www.google.com/amp/s/arstechnica.com/security/2017/0...

https://arstechnica.com/security/2017/03/potent-lastpass-exp...

for a real link to the same article

Re: Ask HN: What is your password management solution?

#319

Earlier quoted context omitted.

Keepass user here wanting to switch over to pass, this is exactly the missing piece of the puzzle I needed - thank you!

I'm looking into using pass / keepass, any particular reason you are switching over to pass?

I think I'm currently in a minimalist phase; the KeePassX UI is too feature rich and cluttered and makes me want to configure everything but I don't want to manage that.

If that's not a problem for you, KeePassX is definitely a solid password manager!

Re: Ask HN: What is your password management solution?

#320

Earlier quoted context omitted.

Sure, take a look on Google's Project Zero and search for "LastPass": https://bugs.chromium.org/p/project-zero/issues/list?can=1&q... Or search the news for LastPass security issues: https://duckduckgo.com/?q=lastpass+security+issues&t=iphone&...

thanks, but all I see is 5 issues, all of which fixed (and rather quickly).

Yep, it's good that LastPass seems to respond quickly to reported vulnerabilities. Who knows how long those issues existed before getting discovered, though. And some of them were quite serious.
Post reply on HN