Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

>Do they work on all platforms (Linux, Windows, Android, MacOX and IOS)? Do they automatically sync (so I don't end up being locked out of one account)? Can I be sure they won't be shut down and thereby leave me cut of from all my online services?

Yes, yes, yes (make a text backup, another supported feature, also every device would have a local copy, etc, etc)

>And what do I do when the password manager is, inevitably, broken into?

Why? Because you left it open and unencrypted? How about, just not doing that? Mine is locked every time I close the browser. If you're paranoid only unlock it when you need to enter a site. Not only that, but even if your master password is "stolen" somehow... it's a single password to change and your other passwords are secure. Again, if you're paranoid, you'd at least have a list of the sites that you have to worry about.

>It seems to me that a password manager is a great theoretical idea, but they don't really work in practice.

It seems to me that you really don't understand what is out there or what you're talking about. These things are true of not just LastPass but other solutions as well.



You are right, I don't understand what I out there because I haven't look. Based on your response I have determined that it might be worth looking into, but I don't know which to choose.

But by broken into I mean hacked, as in 'due to $INSECURE_FEATURE $SOMEBODY copied the entire database and now have all your passwords'. If somebody breaks into my home and steals my computer, I can call the police (and activate the tracking beacon).


>But by broken into I mean hacked, as in 'due to $INSECURE_FEATURE $SOMEBODY copied the entire database and now have all your passwords'. If somebody breaks into my home and steals my computer, I can call the police (and activate the tracking beacon).

Like I said, it's all locally encrypted. I trust (at least LastPass's) model well enough that I'd be happy to let you have a copy of all the data LastPass has for me on their server.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: