Hacker News new | ask | show | jobs
by garblegarble 3908 days ago
Hi,

I just bought 1password, switching from LastPass - one feature I really liked in LastPass was the ability to save the master password (I keep important passwords in my head and a password manager for less important things). Is there any chance this functionality will be provided? As it stands if I want to keep using 1Password I'll downgrade my Master Password strength (because it's a real pain to type it every time I reboot, especially on my phone) and that makes me feel more uncomfortable than knowing if someone knows my system login password they could compromise my vault...

LastPass did guard this functionality with a big "your security will be seriously compromised, are you absolutely sure?" prompt which I think is fair enough

1 comments

You realize that having that option enabled is basically equivalent to having a plain text file on disk which has your passwords, right? If you encrypt your filesystem, this isn't so bad, but still any kind of remote execution exploit could basically gain access to all your passwords.
Well, it'd be encrypted with my login password as part of Keychain password storage under OS X (and with my device key + unlock code under iOS) so at rest it's still going to be fairly secure.

But, as I said, I don't use password managers for passwords that are really important, I use them for the bulk of online services where I'd like to use a different random username/e-mail & password for each.