News for hackers. Stuff that matters.

A comment on We didn't encrypt your password, we hashed it. Parent comment

Re:We didn't encrypt your password, we hashed it by laurent92 on Saturday September 05, 2020 @02:55AM (#24381827)
We haven’t lived through a big password manager leak yet. But a password manager gives the list of usernames, passwords and websites. This kind of compromission is probably worth a million dollars per user. That’s a lot of data in the same vault. Just saying.
[ Parent | on HN ]
Re:We didn't encrypt your password, we hashed it by nuker on Saturday September 05, 2020 @03:05AM (#24381854)
KeepassXC is the kind that can not leak, giving passwords to third party is insane.
[ Parent | on HN ]
Re:We didn't encrypt your password, we hashed it by ClumsyPilot on Saturday September 05, 2020 @10:56AM (#24384009)
Mist people arent worth a million dollars, that downright silly.

But i do agree that centralised storage of everyone's passwords does not make sence.

I've decided to use KeePass and store the encrypted password file in cloud storage - that way it syncs between my phone and conouters, and i can always get at it if i really need to. But it does make logging into reddit on someone else's oc very difficult.

[ Parent | on HN ]