258
You probably can't trust your password manager if it's compromised (www.theregister.com)
submitted 8 months ago by to c/technology@lemmy.world
112 comments fedilink hide all child comments
 

Researchers demo weaknesses affecting some of the most popular options Academics say they found a series of flaws affecting three popular password managers, all of which claim to protect user credentials in the event that their servers are compromised.…

you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 8 months ago (2 children)

Why would you do that? Just sync thr database with Syncthing and keep it locally on your devices. I'd never put my pw dB in a publicly available cloud online, even though it's encrypted.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 8 months ago* (1 child)

    For backup.

    So all of my hard drives and devices are in the same house, if I was sleeping and and house caught on fire and I couldn't even get my phone in time (just a worst case example), then I lose all my passwords.

    Cloud is my "offsite backup". Cuz where else would I put stuff?

    Also: I though you could just safely upload encrypted files to Google Drive, why not a password database? It's just another encrypted file.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 2 points 8 months ago

    I see. For this scenario, I have another Syncthing server, which is on 24/7, responsible for offsite backups.

    Ad encrypted files: true, but why expose them to a potential adversary? If there should be a flaw in the encryption (now or future) the other party already has access to the file.

  • permalink
  • fedilink
  • source
  • parent