News for hackers. Stuff that matters.

A comment on Ask HN: What is your password management solution?. Parent comment

Re:Ask HN: What is your password management solution? by stephengillie on Saturday July 15, 2017 @11:47AM (#14777225)
What is the cause for your paranoia about keeping your keyfile in your Dropbox? I have used and advocated this model for years with no ill effects.

My Dropbox is secured by MFA, with the Dropbox password itself being a random password within the KeePass keyfile. I store the whole Keepass program for Windows inside the same Dropbox account, feel free to indicate that as a security gap. On mobile I use the KeePass2Android app.

[ Parent | on HN ]
Re:Ask HN: What is your password management solution? by dannysu on Saturday July 15, 2017 @12:10PM (#14777371)
You meant the kdbx file right? not the separate keyfile you can use to secure the kdbx file with.

I think the feeling is the same as the feeling of just leaving your SSH private key "out there". Sure, it's protected with a passphrase, but I still don't want to do that.

Can you trust Dropbox would never have security issues? See https://blogs.dropbox.com/dropbox/2011/06/yesterdays-authent...

Didn't matter if you have MFA or use a secure password.

[ Parent | on HN ]
Re:Ask HN: What is your password management solution? by stephengillie on Monday July 17, 2017 @09:49PM (#14793775)
Some people will not be satisfied so long as the keyfile, KDBX, and password reside in the same version of our shared reality, as it's still mathematically possible to decode the numbers into something they personally value.
[ Parent | on HN ]