Show HN: Fast Lane, a Stateless Password Manager
1–5 of 5 posts
Re: Show HN: Fast Lane, a Stateless Password Manager
#2Maybe I'm missing something obvious here, but how would you handle situations where you are forced to change your password, like after a site is compromised or they force password rotation?
Re: Show HN: Fast Lane, a Stateless Password Manager
#3Maybe I'm missing something obvious here, but how would you handle situations where you are forced to change your password, like after a site is compromised or they force password rotation?
I think that's the primary tradeoff here. You would probably have to generate a new master password. Using something like dash lane would be prone to breaches like it happened recently, but to avoid that we can use this, which the only downside would be changing the master password.
Re: Show HN: Fast Lane, a Stateless Password Manager
#4Maybe I'm missing something obvious here, but how would you handle situations where you are forced to change your password, like after a site is compromised or they force password rotation?
Sorry for not clarifying further, but yes, that would be a major limitation if you have many account logins. The person who would use this would be someone in a very particular niche like me, who has very very account logins, and is willing to generate a new master password when necessary, and only uses this for sensitive applications. The ease of use, and the knowing that if I only have one password, I can access any account saves me time and gives me needed security.
Re: Show HN: Fast Lane, a Stateless Password Manager
#5I used to use stateless passwords generated by PwdHash: https://hw.leftium.com/#/item/23142756
Even made a little to tool to help out when the browser extension did not work: https://ph.leftium.com/
Unfortunately I ended up with multiple "master" passwords:
- When forced to change the password for a site.
- Or when your master password resulted in a hashed password that failed a site's password requirements.
These days I just use a password manager (Enpass). Whenever possible, I use "pronounceable" passwords because when auto-insert is not possible it's easier to type a series of words than random characters/symbols. Especially on mobile.