Re:Assume your devices are compromised
by stuckkeys on Monday April 18, 2022 @08:20AM
(#31069711)
I forgot my master password two days after. I thought I had stored it someplace and my guess the phone shaked after typing the master key and it undid the characters. FML moment. Spent a week resetting passwords. I only set passwords once. We use bitwarden. It was a pretty fuckery.
[ Parent
| on HN ]
Re:Assume your devices are compromised
by neverminder on Monday April 18, 2022 @09:19AM
(#31070159)
This is why I have so far avoided password managers: single point of failure. What if you forget your master password. Or worse - what if your master password is stolen?
You can use this approach http://lukasz-madon.github.io/Password-management/
Re:Assume your devices are compromised
by wintermutestwin on Monday April 18, 2022 @09:44AM
(#31070442)
... or what if you are traveling and your phone and laptop are lost or stolen?
Your bitwarden password manager is hosted and is only stored encrypted on your phone/laptop. So unless the thief knows your master password you should be fine.
Re:Assume your devices are compromised
by wintermutestwin on Monday April 18, 2022 @10:54AM
(#31071482)
I understand that the thief won't have access to my accounts, but now I don't either - correct?
You would still have access to your accounts as the credentials are hosted by BitWarden or by yourself (on a personal server for example).
Re:Assume your devices are compromised
by fauigerzigerk on Monday April 18, 2022 @11:10AM
(#31071734)
It depends on whether you have access to the second factor. I have Authy installed on two phones for that reason.