Hacker News new | ask | show | jobs
by Svenskunganka 2829 days ago
You should use a password manager, there's been a few cases already where malware shows how trivial it is to steal and decrypt into plain-text passwords stored by the browser.
1 comments

If I have malware on my computer, I assume it'll be able to capture my password no matter if they are encrypted or not.
Unless you have adversaries personally attacking you, your main threat is automated malware. In that case, I think that it's vastly more likely that said malware would target super-popular and totally-insecure software like the Chrome password manager, rather than something not very popular and quite secure like KeePassXC.

I personally recommend Bitwarden as a good compromise between security and usability. It's totally open source, so you can run the API and webservice on your own hardware if you want.