252
Password managers are less secure than promised (ethz.ch)
submitted 8 months ago by to c/technology@lemmy.world
110 comments fedilink hide all child comments
 
  • Millions of people use password managers. They make accessing online services and bank accounts easy and simplify credit card payments.
  • Many providers promise absolute security – the data is said to be so encrypted that even the providers themselves cannot access it.
  • However, researchers from ETH Zurich have shown that it is possible for hackers to view and even change passwords.
you are viewing a single comment's thread
view the rest of the comments
[–] 33 points 8 months ago (6 children)

Use a offline password manager. Problem solved.

  • permalink
  • fedilink
  • source
  • hideshow 6 child comments
    •
  • [–] 14 points 8 months ago (4 children)

    Solves the security issue. Destroys the accessibility part

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 3 points 8 months ago

    I use an offline password manager, and sync an encrypted database with nextcloud. It's convenient enough, and secure enough for me. Easy to sync between my phone, desktop, and laptop. And I only need to remember two passwords, the nextcloud one, and the manager one. I don't think you can have it more secure and convenient all the same, at least not with current tech.

  • permalink
  • fedilink
  • source
  • parent