Simplified Sign-Up and Log-In Flows

Re:Simplified Sign-Up and Log-In Flows by dorian-graph on Wednesday February 15, 2012 @07:11AM (#3593927)

An alternate, and which I use, is 1Password which doesn't store our database of passwords and whatnot on their services as it's a local file. You can sync it with Dropbox and it's therefore on Dropbox's servers but it's secured in some way. I remember trying LastPass but dropped it because of security worries.

You're definitely right about it being amusing at what get's people in a row. The main difference between this and the phone apps is that they deliberately chose to place their data with LastPass. So, it seems to be not the content but the authority that matters.

[ Parent | on HN ]

Re:Simplified Sign-Up and Log-In Flows by LinaLauneBaer on Wednesday February 15, 2012 @07:34AM (#3593975)

Remark: As far I know 1Password does not encrypt everything. Lets say you store a password in 1Password for twitter.com then the password is being encrypted but the information that the password is used for twitter.com is not. So someone could find out that you are using twitter simply by going through your 1Password file. This may be a problem with sites that are not as harmless like twitter.

[ Parent | on HN ]

Re:Simplified Sign-Up and Log-In Flows by nickyp on Wednesday February 15, 2012 @08:13AM (#3594088)

Interesting observation.

I checked a couple of my 1Password files and you're right: usernames & passwords are encrypted, but not the website/URL they're associated with.

[ Parent | on HN ]