News for hackers. Stuff that matters.
Re:Pwned Passwords in Practice: Real World Examples of Block... by rjacksonm1 on Tuesday May 29, 2018 @08:13AM (#17178376)
It is the best way to do it for the average user.

Modern password management services are incredibly secure, with client-side encryption of your secrets, among other protective mechanisms (to guard against keyloggers, stolen computers, ...)

There is still a risk, because you're trusting third-party software (which in some cases is closed-source – including 1Password), but for most people that is a much lower risk profile than if they were managing passwords themselves.

For specifics on 1password's security, check out https://1password.com/security/

Re:Pwned Passwords in Practice: Real World Examples of Block... by willvarfar on Tuesday May 29, 2018 @08:41AM (#17178567)
> Modern password management services are incredibly secure

There lots of password managers that have had gaping vulnerabilities. From memory I'm sure I've seen LastPass vulnerabilities top HN just a while ago... yeah probably this one: https://www.bankinfosecurity.com/lastpass-patches-password-m...