Re:Design flaws of password managers
by jimmyswimmy on Sunday January 03, 2021 @01:55AM
(#25620099)
Huh. I've been using Keepass2 with a smartcard for a long time now. I don't like that all passwords are unlocked at once, but the DPG approach seems to act the same way. The DPG approach also requires that if I update my 'amazon' password I have to remember that I'm on 'amazon3' or whatever version.
I'd really like to figure out a way to have Keepass or a similar system only unlock one password at a time. I think I can do this using the smartcard by encrypting each password individually using the card, but I've been too busy to learn the plugin system.
This way I can only open my password manager on a trusted system, since the entire key database is open. I suppose this is also equivalent to the DPG approach, assuming you use an obvious name for each website (i.e. amazon, google, ebay, etc.)
I'd really like to figure out a way to have Keepass or a similar system only unlock one password at a time. I think I can do this using the smartcard by encrypting each password individually using the card, but I've been too busy to learn the plugin system.
This way I can only open my password manager on a trusted system, since the entire key database is open. I suppose this is also equivalent to the DPG approach, assuming you use an obvious name for each website (i.e. amazon, google, ebay, etc.)