[Phlarp]

>What I will not do is store my passwords in my browser, that seems like an awful idea. Especially because some things automatically sync across browsers.

The serious browser extensions that do this use encryption for syncing, you are correct that centralizing them all in a browser extension is a negative for security, but the upside of having random and different passwords for each site or service _far_ outweighs the risks posed by centralization or browser storage.

The odds that one or more sites you use end up leaking your plaintext passwords is far more likely than Lastpass being hacked, even the odds of someone identifying your self described insecure pattern from a series of these leaks is far more likely than getting burned by an extension.

I had my apprehensions before starting to use a password manager, but after six months I consider it absolutely essential and urge everyone else to use LastPass or a similar addon. The benefits massively outweigh the risks.

[tyrust]

>The odds that one or more sites you use end up leaking your plaintext passwords is far more likely than Lastpass being hacked

I'm not sure this is a fair generalization, especially without knowing the sites sthreet visits. Lastpass holds thousands of passwords and is probably a pretty big target for hackers. I don't doubt that they have great security, but nothing is guaranteed; one should at least admit that trusting Lastpass as a SPOF is a non-trivial decision to make.

[lewisl9029]

Any idea why browsers haven't implemented their own native password generation functionality yet?

If nothing else, having this functionality built into popular browsers would increase public awareness of better password practices by at least an order of magnitude.

[forgotpasswd3x]

There's an option you can enable in chrome://flags to enable a password generator. I don't believe the user gets any control over the password's complexity right now, but it looks like it's something that the Chrome team is at least considering.

I'm not aware of anything similar being built into Firefox.

[Phlarp]

Great question, I'd love to hear from someone on the Chrome or Mozilla teams about this. Until then we'll just have to assume they are all busy finding new and interesting ways for browsers to use up more system memory.

[gkanapathy]

Safari on the Mac does.