Hacker News new | ask | show | jobs
by atmosx 3260 days ago
It doesn't have a browser plugin and will not work with my iPhone... So it's a no-go for me and I guess many others.
3 comments

I wouldn't let any password manager touch my browser. Giving attackers access to your password manager's APIs via JS or DOM elements is how most (all?) of the dozens of severe LastPass bugs have happened.
Pass - Password Store by Mingshen Sun https://appsto.re/gb/DY13hb.i
pass has a variety of 3rd party browser plugins and phone apps that work with it. Admittedly, it's not a turnkey solution and so is unsuitable for a non-technical audience.

I recommend website-based password managers to my non-technical friends because they're easiest to use and therefore most likely to actually BE used, and the security vulnerabilities noted in the article are very small compared to not using a password manager at all.