Hacker News new | ask | show | jobs
by marcioaguiar 3508 days ago
How is this different from having one password for all sites? If I break the master password I gain access to everything.
2 comments

If you use one password for all sites:

* if password hashes from any site you use leak and they’re weak, you’re compromised everywhere

* if any site is or becomes malicious and its operators/hackers read your password, you’re compromised everywhere

This approach (maybe not implementation – its hashing is kind of weak) is fine if your master password is strong enough, which it should be.

If the database of a site gets stolen it makes it a little harder to break your master password.