News for hackers. Stuff that matters.

A comment on On Password Managers. Parent comment

Re:On Password Managers by tptacek on Friday July 21, 2017 @11:14AM (#14821169)
Yes! The actual encryption of passwords is not the hard part of a password manager (though, of course, commercial password managers seem plenty capable of screwing that up!)

The hard problem is getting the passwords out of the encrypted store and into form fields in your browser.

[ Parent | on HN ]
Re:On Password Managers by cyphar on Friday July 21, 2017 @12:49PM (#14821944)
Would you consider the KeePassHTTP solution to be adequate (they have a browser plugin that acts as a password manager using the browser's APIs and the passwords are retrieved after authenticating the plugin with the KeePassXC server -- which prompts the user each time and only entries that match the URL are sent).

They also support copying the password to your clipboard (which they then clear after a few seconds). There's also the automated entry system which basically emulates keystrokes.

[ Parent | on HN ]