Not in a Million Years – 1Password

Re:Not in a Million Years – 1Password by infinitelurker on Thursday December 29, 2022 @08:57AM (#34172614)

Am I the only one who thinks it's crazy to put all of your passwords on a companies cloud where every single one of their other customers password vaults also lives?

Aside from putting the burden for file management of the vault on the customer, help me understand how local storage (with backups) isn't the safest place to keep my passwords from being compromised.

[ Parent | on HN ]

Re:Not in a Million Years – 1Password by orf on Thursday December 29, 2022 @10:53AM (#34173856)

You’re not the only one, but that doesn’t make it crazy.

There’s a lot of confidential data stored on S3. This data is intermingled with other confidential data from lots of other companies at the storage layer. But encryption and proper access controls mitigate the risks you’ve described.

As with anything it’s a judgement call. I trust AWS to implement this correctly, and they send out all the correct signals to back this up. 1Password does as well. However lastpass never has, and so it would be a poor call to use their cloud service.

[ Parent | on HN ]