Browser password managers – flawed security, by design

Re:Browser password managers – flawed security, by design by jeroenhd on Monday August 15, 2022 @04:02PM (#32474648)

I don't like copy/pasting passwords. Many computers have a clipboard log these days and you never know what program is polling for your clipboard contents. Mobile apps used to do this all the time and I don't believe for a second that shitty trackers and other such online stalkerware doesn't try to get the contents of your clipboard.

I use an integrated browser mostly so I don't need to go through my clipboard, even though Bitwarden has a setting to auto clear the clipboard after copying a password.

[ Parent | on HN ]

Re:Browser password managers – flawed security, by design by KronisLV on Wednesday August 17, 2022 @08:18AM (#32495269)

> I don't like copy/pasting passwords.

A nice feature that some local password managers like KeePass have is that you can auto type them, so the actual password doesn't end up in the clipboard.

Of course, personally I'm not a fan of the idea of the command being interpreted incorrectly or messing up window switching so that my password would be sent to the wrong application.

[ Parent | on HN ]