Assume your devices are compromised

Re:Assume your devices are compromised by neverminder on Monday April 18, 2022 @09:19AM (#31070159)

This is why I have so far avoided password managers: single point of failure. What if you forget your master password. Or worse - what if your master password is stolen?

[ Parent | on HN ]

Re:Assume your devices are compromised by ed_balls on Monday April 18, 2022 @10:16AM (#31070926)

You can use this approach http://lukasz-madon.github.io/Password-management/

[ Parent | on HN ]

Re:Assume your devices are compromised by wintermutestwin on Monday April 18, 2022 @09:44AM (#31070442)

... or what if you are traveling and your phone and laptop are lost or stolen?

[ Parent | on HN ]

Re:Assume your devices are compromised by belval on Monday April 18, 2022 @10:08AM (#31070798)

Your bitwarden password manager is hosted and is only stored encrypted on your phone/laptop. So unless the thief knows your master password you should be fine.

[ Parent | on HN ]

Re:Assume your devices are compromised by wintermutestwin on Monday April 18, 2022 @10:54AM (#31071482)

I understand that the thief won't have access to my accounts, but now I don't either - correct?

[ Parent | on HN ]

Re:Assume your devices are compromised by belval on Monday April 18, 2022 @02:25PM (#31074531)

You would still have access to your accounts as the credentials are hosted by BitWarden or by yourself (on a personal server for example).

[ Parent | on HN ]

Re:Assume your devices are compromised by fauigerzigerk on Monday April 18, 2022 @11:10AM (#31071734)

It depends on whether you have access to the second factor. I have Authy installed on two phones for that reason.

[ Parent | on HN ]