News for hackers. Stuff that matters.
Re:"Pwned Passwords" V2 With Half a Billion Passwords by sebazzz on Wednesday February 21, 2018 @03:34PM (#16432737)
Keepass works great, but one disadvantage is that you cannot you additional credentials providers if you want to open your database on other devices. For instance, if I would use a Yubikey provider, I cannot open the database on my iPhone.

It would be great if the authentication providers can be configured in an 'or' instead of an 'AND' (this means convenience vs security). So on Windows, with my Windows account or perhaps Hello it unlocks my Keepass database and perhaps use a Yubikey, but on my iPhone I'm still required to enter a password. But unfortunately, the current implementation combines the authentication providers to create a combined encryption key.

But still, Keepass is easy to setup and maintain. Just put your database on your favorite cloud provider (if you want to take the risk) or manually sync it to your phone and you got the righty credentials everywhere at hand.

Re:"Pwned Passwords" V2 With Half a Billion Passwords by Spooky23 on Wednesday February 21, 2018 @05:35PM (#16433602)
One way to address this is to have a long term vault that doesn’t get edited often and a working vault.