Technology

hideshow 6 child comments

[–] smolyeet@lemmy.world 16 points 2 years ago (1 child)

The idea is fine. Still trusting lastpass was the bad idea. Others have much better implementations to protector your vault and don’t drop the ball on security time after time.

parent

[–] serratur@lemmy.wtf -1 points 2 years ago (1 child)

They might have better implementation, but that only means it will take longer time before a data breach happens, it doesn't stop them.

parent

[–] Fisch@lemmy.ml 5 points 2 years ago

A data breach isn't an issue by itself. It's only an issue if it's possible to decrypt your passwords.

parent

[–] Blackmist@feddit.uk 13 points 2 years ago

It's OK as long as you're the only one with the key to it.

If your storage provider can decrypt it, so can anybody who hacks them or works for them.

Sometimes these are the same people.

parent

[+] MagneticFusion@lemm.ee 12 points 2 years ago (1 child)

[deleted]

parent

[–] evranch@lemmy.ca 14 points 2 years ago (2 children)

I use Syncthing to keep my Keepass files synchronized on my devices. All the benefits of cloud storage, but my password file never leaves my control.

hideshow 4 child comments

parent

[–] captain_aggravated@sh.itjust.works 3 points 2 years ago

I do exactly this.

parent

[–] HaggierRapscallier@feddit.nl 1 point 2 years ago (1 child)

Great idea! I rely on Firefox's service, would you recommend I switch?

parent

[–] evranch@lemmy.ca 3 points 2 years ago (1 child)

Personally I don't like to rely on anyone's cloud services for mission critical applications like password storage, since they have a history of being discontinued without notice.

I do trust Mozilla a lot more than Google, though.

With Syncthing at least if the discovery servers go down you still have a local copy as well as off-site backups, and can easily migrate to some other sync solution as your password manager is not tied to your browser.

parent

[–] PlexSheep@feddit.de 1 point 2 years ago

I would argue that email is similarly as critical, yet Selfhosting email is a bad idea practically and from a security standpoint. Your argument does not apply in general.