We’ve all been there.

  • Doug [he/him]
    link
    fedilink
    English
    arrow-up
    0
    ·
    2 years ago

    I’d rather try and remember than have a single point of failure for all my accounts’ security.

    If the passwords are stored offline then I can’t get at them if I’m away from where they’re stored. If they’re stored online they’re not secure.

      • Doug [he/him]
        link
        fedilink
        English
        arrow-up
        0
        ·
        2 years ago

        Encryption can be decrypted. A password manager encrypting your passwords is like saying your car has working brakes. It’s totally unsafe to even consider operating without but it doesn’t say much when it is there.

        It’s not a matter of “why should I trust them” but “why should I trust them more than the system that already exists”. I get the appeal, but the hole is big.

        If I forget a password I reset it. If I forget my manager’s password can it be reset? Is the reset option, if extent, susceptible to attack?

        If an account gets compromised it could have moderate repercussions, but probably minimal depending on the account, with maybe a couple exceptions. If managed passwords get compromised that’s potentially everything. There has not, and likely never will be, an impenetrable system, so it is a possibility if not a concern.