Post 9kY5IMGWeIcs4rE5Gi by leadore@toot.cafe
(DIR) More posts by leadore@toot.cafe
(DIR) Post #9kXQ7xbpMzsYaf75VI by ironmonkey@fosstodon.org
2019-07-05T11:03:24Z
0 likes, 1 repeats
Password approach:This is interesting...https://masterpassword.app/what/
(DIR) Post #9kXQ7xsqLjURRR4g1g by codesections@fosstodon.org
2019-07-05T11:27:13Z
0 likes, 0 repeats
@ironmonkey > Password approach: This is interesting... https://masterpassword.app/what/Agreed. I've heard of similar systems before, where all your passwords are generated from a master password (rather than stored). It does sound interesting/coolI've never used that sort of system myself for two reasons:- Compromising your master password gives an attacker access to all sites without the need for access to a device with your stored password.- Changing your master password means changing all
(DIR) Post #9kXQRTjSA4wJihzGNc by ironmonkey@fosstodon.org
2019-07-05T11:30:50Z
0 likes, 0 repeats
@codesectionsThat's the problem. But with some current cloud sync change master pwd and they wipe the DB. When is there a perfect solution? Lol yeah changing every pwd would hurt.
(DIR) Post #9kXQdAaJB3PHoIHhHU by codesections@fosstodon.org
2019-07-05T11:32:56Z
0 likes, 0 repeats
@ironmonkey Yeah, fair enough. I tend not to use cloud sync for similar reasons.(I use #pass and my own homebrew https://passgen.codesections.com and store my passwords on two computers, a raspberry pi, and my phone—that's more than enough of a cloud for me!)
(DIR) Post #9kY5IMGWeIcs4rE5Gi by leadore@toot.cafe
2019-07-05T19:08:33Z
0 likes, 0 repeats
@codesections @ironmonkey Another problem would be with sites that force you to change your password every so often.
(DIR) Post #9kYF5ltH40wLKRzHXs by qwazix@mastodon.social
2019-07-05T20:58:17Z
0 likes, 0 repeats
@codesections @ironmonkey I had spun up my own similar solution years ago but it couldn't cope with weird password requirements. I don't know if this does but I would always have a site wanting one extra special character or a character would be forbidden. Some even choked when passwords were too long 🤦♂️