Ask HN: Google SSO or Password Manager?
61–64 of 64 posts
Re: Ask HN: Google SSO or Password Manager?
#62Centralized authentication puts all your eggs in one basket, while password manager splits risk by not sharing passwords across use-cases. That said, I don't see why you shouldn't do both.
How would you do both, in this case? Either you create accounts per site, or use SSO, no?
For high-value targets, create a stand-alone account, put password in password manager (preferably offline) and enable MFA. If MFA isn't supported, I would choose another provider if it is really high-value.
Re: Ask HN: Google SSO or Password Manager?
#63Centralized authentication puts all your eggs in one basket, while password manager splits risk by not sharing passwords across use-cases. That said, I don't see why you shouldn't do both.
Password managers also put all your eggs in one basket: the master password to your PM! There is after all a reason that it’s called 1Password!
I also would enable MFA for any high value targets, so that a password leak alone wouldn't ruin you.