Okay so yesterday, I changed my password as a precaution because of the hack, and just now I decided to clean my browser tabs and re login and almost forgot my password. I’m done dealing with passwords.
What password manager do you recommend?
Features I’m looking for
-Open Source
-Can be synced to cloud (I don’t want self host)
-Can be accessed via a browser
-Cross platform, the more platforms, the better
-End to End Encrypted, and Encrypted at rest on my device, also need some way to authenticate before releasing the password, like a pin or biometrics
-Autofill for browser and apps
-Free (can be a freemium model, but I need the base tier to be free, too broke to spend money on this lol)
-Can export the passwords to a file
I never used a password manager before so sorry if I seem like a noob.
I know I could google it, but I want the lastest info, not some outdated reddit post.
Edit: Woah, those replies are fast. I think I’ll use Bitwarden. Thanks for recommendations! Now I don’t need to worry about forgetting passwords anymore. 😄
Edit 2: It seems I’ve forgotten my email password as well as a few other accounts I haven’t logged into for a while. Damn, should’ve used a password manager earlier.
Online password manager GTFO never ever doing that.
I use password safe desinged by Bruce Schneier, it’s legit AF, https://pwsafe.org/
Do you not need to sign in to your accounts from different devices? Not to mention autofill support is a big deal, hence why browser addons are so important. The other password managers are plenty secure, especially with 2fa and webauth which that app certainly is not going to have.
The convenience factor is not there but you probably sacrifice security for the conveniences. Browser add-on is something else that can get hacked.
What do you do for a living where you somehow don’t need mobile autofill? Do you not leave the house?
I used do cyber security for a fortune 500, that’s where I got exposed to that password manager. Now I don’t work, stay at home dad aka house manager.
Why are online password manager bad? Sure, the risk is obviously higher than the offline one, but online password manager would be sufficient for most people. Convenient outweigh for like 99.99% of people. Even if there is a data breach, passwords’ hashes are not easy to crack, even if you know the salt. The only way to crack it is that you reuse password. So, as long as you use strong enough master password, it’ll most likely be fine.
Also, if you care about security, you’ll also probably be using TOTP 2FA anyway. So unless, TOTP secret is leaked at the same time as your password, then you are fine.
https://blog.lastpass.com/2023/03/security-incident-update-recommended-actions/?utm_source=google&utm_medium=cpc&utm_campaign=19467886458&utm_term=lastpass hacked&utm_content=144001089494&sfdcid=7018c000001FDby
That’s a breach they told the public about. What’s worse is when a company gets breached and they don’t know it happened or it takes them years to find out. I’d rather step on my own ding ding than put my credentials online.