[FooHentai]

My setup is almost identical, though I skip the browser plugins and let the password manager auto-paste into the browser. Keepass inside GDrive, job done. Very occasionally I'll make a copy out to a portable drive.

I've been running this setup for about a decade,since some big breach (I forget which one) made it clear to me that using the same or similar passwords across multiple sites was not gonna fly any longer.

The initial time investment was surprisingly heavy - I iterated through every online login I could find for myself (searching through email history mostly for signups confirmations) and changed the password on every account I had. Took about two full days.

[ramraj07]

After realizing how every program running on your machine can Snoop on your clipboard I'm never allowing any program to send my password to the clipboard again.

[mimimi31]

Haven't you pretty much already lost when you can't trust the programs running on your machine? If they can snoop on your clipboard, they're probably also able to access your sensitive files, log key presses, take screenshots, install browser extensions etc.

[Wowfunhappy]

They'd need root access to do half of those things. The other half are bad but not life-shattering.

[mimimi31]

This obviously depends on your OS and setup, but on Linux + Xorg at least I don't need root access to do any of the things I listed.

[Wowfunhappy]

Sorry, I must have been very tired last night. This morning, I can't remember (or figure out) which actions I was thinking of when I wrote that.

The only one that still jumps out to me is browser extensions—I'm pretty sure none of the major browsers allow that without user approval within the browser. You'd have to do something nasty which would require root.

[mimimi31]

>The only one that still jumps out to me is browser extensions—I'm pretty sure none of the major browsers allow that without user approval within the browser. You'd have to do something nasty which would require root.

I've admittedly never tried it, but as far as I understand, installing an extension in Firefox just involves copying the corresponding .xpi file to the profile folder (which is owned by the user, not root) and modifying a few configuration files (e.g. extensions.json). I don't see why some other program wouldn't be able to do that.

If root access were required, you'd have to supply your root password every time you wanted to install an extension.

[paulryanrogers]

KeePass (official) can split the auto fill between typing and pasting to mitigate sniffers which only monitor cupboard or keyboard.

[FooHentai]

I'm far less worried about that than I am about one website breach resulting in my accounts on other sites being compromised.

Perfect security doesn't exist, of course, so somewhere in the middle lies a good compromise that trades off risk and convenience. For me keepass on a synced drive hits the mark.

Not sure what the solution would be if you don't trust local programs - Keepass' paste method already bypasses the clipboard IIRC by entering directly into the fields.

[accrual]

I think it would be great if major OSs offered an "$app copied/pasted from clipboard" notification like iOS.

[fsflover]

If you care about such things, you should probably use Qubes OS with a dedicated VM storing passwords.