Hacker News new | ask | show | jobs
by mekwall 4910 days ago
This merely gives the user a false sense of security. What if a hacker get hold of your master password? I rather advocate the use of different high-entropy passwords divided in security tiers. A junk password for places you don't care about or fully trust, a generic password to use on trusted services and secure passwords for crucial services.
1 comments

The master password is an Achilles heal in all of these systems. Granted, it is even more of a weak point in password.ly.
Which is why I am against such services. Imho, they do more harm then good.
People would have to gain access to my machine, plus figure out my master password to compromise me. But I gain unique, random, 24-32 character long passwords for all my log ins. I think the benefit greatly outweighs the risk.