`pass` is a nice command line tool that stores gpg2 encrypted password files. It's simple, super handy and doesn't require you to trust any third party with what you're storing. website: https://www.passwordstore.org/ man page: https://git.zx2c4.com/password-store/about/
If you're not going to use 1Password, which is still the only commercial password manager I'll recommend, "pass" is probably your best alternative.
Is your recommendation of 1Password contingent on any particular set up (like only using a "local vault" and not their cloud solution)?
Why do the trouble of replying but fail to explain your reasons? That's wasting your own time mostly. I would recommend 1password over lastpass as well. First reason being the security issues of lastpass chrome extension. Though claimed it is fixed now they have claimed before on other issues only to be proven wrong after. I simply don't trust them anymore with my data. But even more I would choose 1password over its…
I understand why it makes people uncomfortable to know that they're not getting all the information I could possibly convey in a comment. I don't see how that would make it better for me to not comment at all.
Because an advice without argument is ignored (in many cases). If it were me I would have rephrased my comment to include a summary. That would be sufficient to understand why you said things and in addition would be perceived less cocky. Now it came over as I'm saying this and you are not worth my time explaining the arguments.
Apparently you have knowledge on the subject so a sentence or five would have helped everybody reading this thread. In fact, it is what I would expect from an HN comment. I usually read the comments before the article as on HN there is often more information than the actual article. Most often different sides of the coin are in enlightened in the comments bringing insight in the otherwise one-sided monologue in the article.
LastPass is the only commercial password manager I recommend. I really think you should avoid 1Password. I'm not going to go into details, sorry.
You do much work in this field?
It doesn't matter whether he does or not. He's using your own argument against you. Stepping in here and saying, "don't worry guys I'm the expert, so don't ask any questions", is just pompous and doesn't actually convince anybody. Use logic to support your claims, not your resume.
Do you know people who run it? Doesn't seem very popular. The prices are pretty expensive with their in my opinion bad limitations on their plans. Limiting by number of password seems lame. Their allowance of a lot of shared users might be good but I'm not completely sure what that means. Not sure why anyone would use them over Lastpass or 1Password.
I chose them a long time ago for reasons I don't remember. It seems to be working well so I don't see a reason for changing. I would probably to something open source now.
It doesn't matter whether he does or not. He's using your own argument against you. Stepping in here and saying, "don't worry guys I'm the expert, so don't ask any questions", is just pompous and doesn't actually convince anybody. Use logic to support your claims, not your resume.
`pass` is a nice command line tool that stores gpg2 encrypted password files. It's simple, super handy and doesn't require you to trust any third party with what you're storing. website: https://www.passwordstore.org/ man page: https://git.zx2c4.com/password-store/about/
Pass also has Android and (AFAIK) iOS clients, and many other frontends.
I memorized 1024 digits of pi in high school. I can deal with a strong password. Keep in mind that most password managers also encrypt your password database with your master password, so my solution isn't any worse than those. Memorizing a even a 16-character (upper/lower + symbols) random string as your master password would be 16*6 = 96 bits of entropy which is more than enough. Dealing with memorizing ONE good 16…
I don't question your memory, that is not my point. How long do you think it takes to crack a password that consists of digits of Pi or anything derived from it? And it's not about Pi either, it's just that you can't beat a computer in that regard. For me, playing around with hashcat, was an eye opening experience and I truly believe in the Schneier quote from above.
Create a 10 word diceware passphrase, using the EFF's list. Try to memorize it, it shouldn't take long. Hash it with whatever hash you like. Even MD5. Try to crack it with Haschat. Spend as much time and/or money as you like on the project. It's got over 128 bits of entropy, you won't succeed before the Sun becomes a red giant and incinerates the Earth.
1Password is the only commercial password manager I recommend, but I'll go further than that when it comes to LastPass and say: I really think you should avoid LastPass, and, if you're using it, migrate to something else. I'm not going to go into details, sorry.
LastPass is the only commercial password manager I recommend. I really think you should avoid 1Password. I'm not going to go into details, sorry.
Well, shit, two conflicting comments. Which advice do I take? Quite the quandary.