29
You probably can't trust your password manager if it's compromised (www.theregister.com)
submitted 5 months ago by to c/privacy@lemmy.ml
25 comments fedilink hide all child comments
 

cross-posted from: https://infosec.pub/post/42164102

Researchers demo weaknesses affecting some of the most popular options Academics say they found a series of flaws affecting three popular password managers, all of which claim to protect user credentials in the event that their servers are compromised.…

you are viewing a single comment's thread
view the rest of the comments
[–] 15 points 5 months ago (1 child)

You can use local ones like KeePassXC.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 3 points 5 months ago (1 child)

    I have a degoogled phone with e/OS. I might try if they get a bit further into my use of their products and security. It sure would simplify methods.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 5 months ago (1 child)

    I have a similar setup with LineageOS. I use KeePassXC on PC (KeePassDX on Android). I can sync them via Nextcloud with peace in mind because the database is already encrypted. Syncthing-fork also works if you want completely local.

    I'm sure e/OS already has a password vault app in their list but if not KeePassXC is fully local out of the box and can be used with DX on Android.

    It's far secure than Firefox's built-in password manager.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 5 months ago

    I've only been using e/OS for a few months. Once I gain more confidence in the OS I can certainly try. I'm still super paranoid. It's a lineage fork so there is update lag and possible security limitations in the OS itself. I'm just not sure yet.

  • permalink
  • fedilink
  • source
  • parent