Re:Horcrux: A Password Manager for Paranoids
by w8rbt on Monday June 19, 2017 @11:12AM
(#14587543)
The master password of the password manager has the same issue plus the burden of storage.
[ Parent
| on HN ]
Re:Horcrux: A Password Manager for Paranoids
by patrickmn on Monday June 19, 2017 @11:23AM
(#14587616)
It's not the same issue. With your approach, a compromise of the seed is catastrophic and reveals everything. With a regular password manager, you also need access to the vault encrypted using that master password. That's not a given -- most password managers either store their vaults locally or offer 2FA when synced.
(Nevermind that you can't change individual passwords or the master password at will with a deterministic scheme.)
Re:Horcrux: A Password Manager for Paranoids
by simondedalus on Monday June 19, 2017 @11:17AM
(#14587580)
and the virtue of allowing a single point of 2FA.
the seed is just the seed, and will always be the seed. the master password can change and be supplemented by 2FA / other enhancement schemes.