News for hackers. Stuff that matters.

A comment on On Password Managers. Parent comment

Re:On Password Managers by atmosx on Thursday July 20, 2017 @04:18PM (#14815920)
It doesn't have a browser plugin and will not work with my iPhone... So it's a no-go for me and I guess many others.
[ Parent | on HN ]
Re:On Password Managers by bqe on Thursday July 20, 2017 @05:21PM (#14816399)
I wouldn't let any password manager touch my browser. Giving attackers access to your password manager's APIs via JS or DOM elements is how most (all?) of the dozens of severe LastPass bugs have happened.
[ Parent | on HN ]
Re:On Password Managers by ViktorEvil on Friday July 21, 2017 @03:08AM (#14818637)
Pass - Password Store by Mingshen Sun https://appsto.re/gb/DY13hb.i
[ Parent | on HN ]
Re:On Password Managers by ekimekim on Thursday July 20, 2017 @04:31PM (#14816028)
pass has a variety of 3rd party browser plugins and phone apps that work with it. Admittedly, it's not a turnkey solution and so is unsuitable for a non-technical audience.

I recommend website-based password managers to my non-technical friends because they're easiest to use and therefore most likely to actually BE used, and the security vulnerabilities noted in the article are very small compared to not using a password manager at all.

[ Parent | on HN ]