Live data from Hacker News

Ask HN: Google SSO or Password Manager?

news.ycombinator.com

61–64 of 64 posts

Re: Ask HN: Google SSO or Password Manager?

#61
I was trying to get a FHO Loan as of last year and i Didn't meet up with the minimum credit score that was required which was 520 i think .. yeah 520 and i had a poor credit of 430 , thought of what to do to boost up my credit but all i did was to no avail not until I was referred to Virtualhacknet@gmail.com , he told me that it was just going to take him 4 weeks because he had a lot doing at that time and to my greatest surprise he got my credit to a wh*ping score of 870.. I'm so excited writing this

Re: Ask HN: Google SSO or Password Manager?

#62

Centralized authentication puts all your eggs in one basket, while password manager splits risk by not sharing passwords across use-cases. That said, I don't see why you shouldn't do both.

How would you do both, in this case? Either you create accounts per site, or use SSO, no?

Use SSO for low-value sites, things where you wouldn't be affected severely if you lost access to the account.

For high-value targets, create a stand-alone account, put password in password manager (preferably offline) and enable MFA. If MFA isn't supported, I would choose another provider if it is really high-value.

Re: Ask HN: Google SSO or Password Manager?

#63
post #23

Centralized authentication puts all your eggs in one basket, while password manager splits risk by not sharing passwords across use-cases. That said, I don't see why you shouldn't do both.

Password managers also put all your eggs in one basket: the master password to your PM! There is after all a reason that it’s called 1Password!

Sure, which is why I would argue it isn't wise to put that basket online.

I also would enable MFA for any high value targets, so that a password leak alone wouldn't ruin you.

Post reply on HN