Even though it's different, but in terms of usage, I think it's like a decentralized 2FA (or MFA) solution?
Show HN: NoKey, a Distributed Password Manager Without a Master Password
21–28 of 28 posts
Re: Show HN: NoKey, a Distributed Password Manager Without a Master Password
#22Earlier quoted context omitted.
That's pretty interesting. It's a trade-off between remembering a password and making sure you have enough devices. I personally would trust my brain (and a backup piece of paper) more than one of my devices that might die at any moment. I use KeePass, but NoKey seems great.
But wouldn't you agree that your brain + NoKey instead of a piece of paper as a backup would be more secure? And more convenient, as you don't have to type your passwords anymore. I don't wanna push you, just wanna give you some things to think about. As long as you use strong and unique passwords everywhere you're good. Also, it's not a big problem if one of your devices dies, as long as you paired enough devices yo…
Sorry, what I said was probably confusing.
I meant, I keep the password to KeePass in my brain and in backup places. I'm unlikely to lose all those.
>Also, it's not a big problem if one of your devices dies, as long as you paired enough devices you won't lose any passwords.
Not everyone has a million devices.
Re: Show HN: NoKey, a Distributed Password Manager Without a Master Password
#23Earlier quoted context omitted.
But wouldn't you agree that your brain + NoKey instead of a piece of paper as a backup would be more secure? And more convenient, as you don't have to type your passwords anymore. I don't wanna push you, just wanna give you some things to think about. As long as you use strong and unique passwords everywhere you're good. Also, it's not a big problem if one of your devices dies, as long as you paired enough devices yo…
Sorry, what I said was probably confusing. I meant, I keep the password to KeePass in my brain and in backup places. I'm unlikely to lose all those. >Also, it's not a big problem if one of your devices dies, as long as you paired enough devices you won't lose any passwords. Not everyone has a million devices.
Ah ok, got it. If you are already using KeePass than there is no reason to use NoKey, KeePass is great!
> Not everyone has a million devices.
I don't think that's fair. With 3 devices you're perfectly ok. Or even with only 2, if you also use a "key box" (gives you one "device" more at the cost of having to remember a password).
Re: Show HN: NoKey, a Distributed Password Manager Without a Master Password
#24Even though it's different, but in terms of usage, I think it's like a decentralized 2FA (or MFA) solution?
Yep, from a user perspective it definitely looks like 2FA.
In terms of technology it's of course completely different.
Re: Show HN: NoKey, a Distributed Password Manager Without a Master Password
#25Earlier quoted context omitted.
> That's wrong, compromising one device doesn't give an attacker anything useful Yea I understand that, but by having a large number of devices with this on it, you increase the chances that any two of them could be compromised. That was my point, I just didn't articulate it well enough.
Does anyone use a password manager for critical accounts? I use them to generate random passwords for sites like yahoo or neopets (or whatever).
My GitHub.com password is >100 characters long and I deem it a critical account (hence the password length), so yes, I do use a password manager for it.
Re: Show HN: NoKey, a Distributed Password Manager Without a Master Password
#26Hi all! This is my first time posting something to HN, so please be kind. I wanted to show what I’ve been working on for the last 6 months: NoKey, a password manager without a master password. Instead, you can unlock your passwords by confirming from another device. E.g. if you need a password on your PC, you only have to confirm this on your phone. No need to remember any passwords! The vast majority of the code is…
I love the Idea, and I think it's pretty smart.
When I'm doing work on my laptop, I always have my phone nearby. I think it's unlikely that both of them are compromised or stolen simultaneously.
Also, the Android app requires no device permissions, haven't seen that in a while.
Re: Show HN: NoKey, a Distributed Password Manager Without a Master Password
#27Hi all! This is my first time posting something to HN, so please be kind. I wanted to show what I’ve been working on for the last 6 months: NoKey, a password manager without a master password. Instead, you can unlock your passwords by confirming from another device. E.g. if you need a password on your PC, you only have to confirm this on your phone. No need to remember any passwords! The vast majority of the code is…
I love the Idea, and I think it's pretty smart. When I'm doing work on my laptop, I always have my phone nearby. I think it's unlikely that both of them are compromised or stolen simultaneously. Also, the Android app requires no device permissions, haven't seen that in a while.
> the Android app requires no device permissions
That's not true, it just uses the new way to ask for permissions. E.g. when you want to scan a QR code it requires the camera permission. But it only asks at that moment, not upfront as older android apps used to do
Re: Show HN: NoKey, a Distributed Password Manager Without a Master Password
#28Earlier quoted context omitted.
Sorry, what I said was probably confusing. I meant, I keep the password to KeePass in my brain and in backup places. I'm unlikely to lose all those. >Also, it's not a big problem if one of your devices dies, as long as you paired enough devices you won't lose any passwords. Not everyone has a million devices.
Ah ok, got it. If you are already using KeePass than there is no reason to use NoKey, KeePass is great! > Not everyone has a million devices. I don't think that's fair. With 3 devices you're perfectly ok. Or even with only 2, if you also use a "key box" (gives you one "device" more at the cost of having to remember a password).
I only routinely use 2 devices. I'm very heavily into the tech scene and could afford more devices if I wished.
Some people don't live in a place where it's easy to afford multiple devices.
Many non-tech people don't even use a desktop PC anymore. They just have a smartphone.
Believe what you will, but it is certainly fair to say not everyone has enough devices for this service to make sense. For example, me, with 2 devices.
>If you are already using KeePass than there is no reason to use NoKey, KeePass is great!
Exactly.