Re:Ask HN: Why shouldn’t I roll my own password manager?
by cocoa19 on Sunday July 14, 2019 @11:19PM
(#20437872)
Reading keepass documentation, you my might also want to consider protecting sensitive data in memory. See keepass Process Memory Protection. https://keepass.info/help/base/security.html#secmemprot
[ Parent
| on HN ]
Re:Ask HN: Why shouldn’t I roll my own password manager?
by bigiain on Sunday July 14, 2019 @11:24PM
(#20437895)
Good advice.
Also it'd be worthwhile investigating how other password manager mobile apps (if you can get the source for them) handle securely storing critical decryption keys in the OS's version of it's secure enclave (if they do). That's a question I have about BitWarden's iOS app that I haven't answered for myself (yet?)