Ask HN: Why should I trust password managers?

Re:Ask HN: Why should I trust password managers? by phantomathkg on Thursday February 17, 2022 @08:00PM (#30380964)

If your threat model truly think it worth the hassle for you to use KeePass offline and sync offline. Then so be it.

However, given KeePass is still a piece of software, nothing stop state-supported malicious hackers injecting vulnerability into it, and suck your password away into their database.

Have you consider making sure all your computers are offline when using KeePass?

[ Parent | on HN ]

Re:Ask HN: Why should I trust password managers? by BenjiWiebe on Thursday February 17, 2022 @11:49PM (#30382248)

Just don't update your password manager. If it's fully offline (and it's a mature product), there's a pretty low chance there'll be an update that you'll actually need.

As time goes on without reported backdoors, the chance that your passwords are safe just gets better.

[ Parent | on HN ]