Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

maybe i am just stupid, but how are password managers secure?

i've seen people using them, and if i were of a less honourable persuasion i could abuse that quite easily... on the other hand, its impossible for me to steal information from out of their brain (so far at least).



I've used 1Password (a popular password manager for the Mac) for several years now. How could you "quite easily" hack those passwords, assuming that's what you're implying?


Keylogger.


Sure, but if you have that level of access to the machine, what's the point you're making?


I dunno, he asked a question and I answered it. I'm making no point.


> its impossible for me to steal information from out of their brain (so far at least).

It's easier than you think to steal passwords from people. Just ask for it!

http://www.veracode.com/blog/2013/03/hacking-the-mind-how-wh...


In reality, unless you are using services that do not allow any kind of email-based "forgot my password" recovery/reset, your email account is your password manager.

I use passpack to store different random passwords on all my online services, EXCEPT for my email account. That one is stored only in my brain.


"how are password managers secure"

Because now you need to steal two things. My password file and my password.

Now admittedly the one weakness is that once you have both those things you have access to all my passwords, but on balance I believe it is an acceptable compromise.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: