[teddyh]

We should stop manually entered passwords. Using a password manager (like the one built into your web browser) with unique secure passwords is fine.

[Wowfunhappy]

How do you authenticate the password manager?

[SketchySeaBeast]

With Keepass you can use a yubikey or key file.

[teddyh]

The context was to stop entering passwords into web sites. The password manager is run locally.

[layer8]

Passwords for websites are (hopefully) hashed locally. And more importantly, how does it make a difference whether you or the password manager types in the password into the web form?

[Wowfunhappy]

> And how does it make a difference whether you or the password manager types in the password into the web form?

Well, because a hidden camera can observe a human typing their password, whereas a password manager does not need to press any physical keys.

However, a camera can observe a human typing a master password into their password manager, which is where I was originally going with the question.

[layer8]

I meant regarding local vs. nonlocal, what the GP objected to.