Hacker News new | ask | show | jobs
by CJefferson 2472 days ago
While in browser password managers have drawbacks, they have the big advantage that they stop fishing / fake domain attacks. I think I'm much mor likely to fall for one of those, than my password manager get hacked.

Also, generating all passwords off one master password deterministicly sounds like an awful, awful idea. If someone manages to get one of my passwords, they can try performing an offline attack against the encoding password. If they succeed, they have everything.

1 comments

It's 2^15 rounds of pbkdf2 with long inputs. There is no master password as nothing is stored. Good luck.