Password Managers

It's curious that we haven't seen dedicated effort towards a consistent password autofill API in browsers, like what is present in Android. Even the Credential Management API seems to have not picked up traction for passwords, though it was extended for use with FIDO2 security keys.

Re: Password Managers

#5

Post by 627467 » Sat, Jun 05, 2021, 8:54 PM UTC

I share the conclusion and for those friends and family who use chrome across devices I've been recommending to just activate 2FA (not sms) and use the built in password manager.

But relying on chrome as password manager - even on Android - has drawbacks as it seems not to support all apps and fields one needs to.

I personally use bitwarden because it seems to work - when I enable all assistive tech - on 99% of situations. I also don't use chrome anymore so using Google password manager isn't as useful.

Re: Password Managers

#6

Post by dtx1 » Sat, Jun 05, 2021, 8:55 PM UTC

This does not reallz discuss offline password managers like keepassx except for this one sentence

> Conceptually, what could be simpler than a password manager? It’s just a trivial key-value store. In fact, the simplest implementations are usually great. Good examples of simple and safe password managers are keepass and keepassx, or even pass if you’re a nerd.

I think keepass synched via nextcloud is a great solution, e2e encrypted, works basically everywhere (windows mac linux osx ios android) and it keeps the sync and backup in your hands. If copy and pasting a password or using autofill for keepass is too much to ask, then you propably don't care about security.

Re: Password Managers

#7

Post by freitasm » Sat, Jun 05, 2021, 8:58 PM UTC

freitasm wrote: post #2

Malicious site

Sorry, to clarify Norton raised an alert on this domain. So proceed with caution.

Re: Password Managers

#8

Post by austinkhale » Sat, Jun 05, 2021, 8:58 PM UTC

freitasm wrote: post #2

Malicious site

How is Tavis Ormandy's blog a malicious site?

Re: Password Managers

#9

Post by mgarfias » Sat, Jun 05, 2021, 9:00 PM UTC

I tried to read this, but my head is too swimmy from all the allergy meds. I’ll have to come back to It.

Re: Password Managers

#10

Post by prophesi » Sat, Jun 05, 2021, 9:00 PM UTC

tl;dr: browser extensions are bad therefore all password managers are bad

Also find it odd the author uses Chrome, which doesn't even let you set a master password to E2E encrypt its password store.