this post was submitted on 27 Oct 2023
1301 points (98.0% liked)

Memes

45646 readers
1474 users here now

Rules:

  1. Be civil and nice.
  2. Try not to excessively repost, as a rule of thumb, wait at least 2 months to do it if you have to.

founded 5 years ago
MODERATORS
 
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 36 points 1 year ago* (last edited 1 year ago) (12 children)

Counterpoint: Password Manager = One point of failure

Multiple Strong Passwords that have to be changed every 3 months even to sign on to your cornerstore rewards program without a password manager? Guess you're never accessing any account older than 3 months because you've forgotten th3 b1lli0n$ oF s+r0ng p4s5w0rds Y0u h4Ve cr3atEd!

[–] [email protected] 9 points 1 year ago* (last edited 1 year ago) (5 children)

Okay and now let's get into threat modelling and risk management.

What is the purpose of a password manager? What are the possible threats against them, and what are those against singular passwords for services? What is the risk of each of those?

[–] [email protected] 7 points 1 year ago (4 children)

Guys, before you argue with me, password security is something that EVERYONE in the 1st world has to deal with, not just tech nerds. If you need to grow up around computers or take a class for it to be a good form of security, its a shit form of security for the general public

[–] [email protected] 2 points 1 year ago (1 children)

But you don't?

Password managers really are not hard to use. Also there's stuff like the password manager built into iOS, for example, which you don't even have to think about.

My comment about threat modelling was that you do not seem to understand the purpose of password managers. A way bigger problem for the average person online is password reuse, not targeted attacks against password vaults. That is the problem they solve.

[–] [email protected] 2 points 1 year ago (1 children)

The weird trope I've seen now is "don't use the password manager in your browser". For the life of me, I can't think why some think a browser plugin to a commercial password manager is safer than the built in version.

[–] [email protected] 1 points 1 year ago

They probably think it's safer somehow. But I don't really get how.

Most built-in password managers allow for you to setup a master password of sorts if you try to sync everything to a new device, and most also require you to use your computer's native verification to view a single password in plaintext or export all of them as plaintext. (For browsers on Windows, they use Windows Hello; for browsers on Android, they use the fingerprint scanner or the lock screen pin.)

load more comments (2 replies)
load more comments (2 replies)
load more comments (8 replies)