Switches to Proton Pass
this post was submitted on 28 Jul 2024
1 points (100.0% liked)
Technology
59587 readers
5464 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
"Here's what you need to know" - Avoid anything Google.
Me when I don't use Chrome, I don't use Windows, and I don't use browser password saving either
Recently started using Bitwarden and it works really well. You can even ditch authenticator because it has OTP built in too.
I selfhost it though because I trust nobody with this type of sensitive data, encrypted or not.
By storing your passwords and otp in the same place it becomes 1 factor authentification
Not really as you're still protected from password breaches, which is most likely to happen anyways, especially if you self host.
If you're actively being targeted for your bitwarden password, you likely have bigger problems
Not if you use 2 factor to access the password manager.
It's still just one factor. You just secured it better.
To set a scene, you awake in the middle of the night because your phone is making noise. Blearily you unlock it, glance at a prompt, and then approve a login and fall back asleep. The intruder now has access to your password manager!
They attempt to log into your bank and drain your life savings, but despite having your password it sends another prompt to your phone. This time, you wake up enough to realize something is wrong. This time, you deny the prompt.
The entire second paragraph cannot happen if your MFA is a single factor. Don't store MFA in your password manager!
load more comments
(6 replies)
load more comments
(2 replies)
load more comments
(13 replies)
A friend has a notebook next to her computer with all her passwords in it. Initially I was horrified - what if you're burgled? - but actually it's genius. Much more secure than letting a browser remember them, and she doesn't even need to memorise a Bitwarden password.
I just make all of my passwords password123 then I don't have to worry about memorizing them
Yeah, these newfangled password requirements ruined my life. I refuse to sign up for any website that doesn't let me use hunter2.
load more comments
(1 replies)
In a household it's probably not that bad. There aren't many people breaking into homes looking for account details.
I've had my identity stolen several times, and every single time it was stolen from a Fortune 500 company.
It's a primitive password manager, primitive because unencrypted and not integrated into your devices, but far better than not having a password manager.
Assuming the laptop is running bitlocker (often on by default), has a user password, and is offline, that's pretty decent.
Notebook refers to a paper notebook. Not a laptop.
load more comments
(10 replies)
feel like "aaand it's gone" would fit better here