>>62873216

of course

Other urls found in this thread:

masterpasswordapp.com/
twitter.com/AnonBabble

>GPLv3

Just because something is open source doesn't mean anyone audits the code

Do you know of any non-botnet addons that do the same thing?

yes also stop using sorosfox and install chrome like a good goy

The whole reason they're killing the old addon API is because every addon could potentially be a fucking botnet or malware and firefox cannot secure them.

>he doesn't store his passwords in an encrypted text file in cold storage and with multiple backups

>he stores his passwords digitally
enjoy your data being backed up at nsa cloud forever

>stores his password on a piece of paper
>spills water on it
>password gone

kek

...

sigh. when will you people learn to make good passwords?

1) pick a strong base phrase, like 57KiloFaggots0Dicks
2) remember base phrase and nothing else
3) insert initials of what you're making a password for:
youtube: 57KiloFaggots0DicksYT
bugzilla: 57KiloFaggots0DicksBZ
paypal: 57KiloFaggots0DicksPP
4) enjoy having a quasi unique password for everything of a strength and complexity you're free to choose while only ever having to remember your base phrase

no need for a password manager or paper storage, no hassle, no security attack surface

fucking git gud already

>no need for a password manager or paper storage, no hassle, no security attack surface
and no reliance on an online service, or the syncing of a master file, or the presence and compatibility of a software clusterfuck like an addon that bridges keepass to firefox, a plugin for this program, an extension for that one, etc

And then when some retarded site that's storing your password as clear text gets hacked and ends up on a pastebin and everyone can see your stupid scheme then what?

A password manager and using random 32 char passwords unique for every site is the only way to operate these days.

yeah, among millions of passwords, your single password will get immense scrutiny because youre so important and someone will bother to hunt your other accounts, and a single instance of a password containing some of the letters of the service name totally tips everyone off that youre doing it as a pattern

>A password manager and using random 32 char passwords unique for every site
>I rely on the availability and security of an online service or installed software to have any access to any of my accounts, so in any of a million plausible circumstances like bad software updates, new devices with no software, internet outages, devices with limited permissions like work pcs, data loss, etc, I will be utterly helpless

>implying anyone would manually check leaked db with millions accounts

>And then when some retarded site that's storing your password as clear text gets hacked and ends up on a pastebin and everyone can see your stupid scheme then what?
use a random password like that and insert the initials somewhere in the middle in the least noticeable case (upper or lower) then, nobody's gonna realize it's not just a coincidence
and if youre paranoid they still might, just caesar cipher (index shift) the digits then, like ab -> bc, nobody in the world will figure it out then even if 5 of your accounts get leaked

>use a random password like that
*as your base phrase

>im extremely paranoid about security
>so i make an online service or master file and password manager the single point of failure for all of my security

>yeah, among millions of passwords, your single password will get immense scrutiny because youre so important and someone will bother to hunt your other accounts, and a single instance of a password containing some of the letters of the service name totally tips everyone off that youre doing it as a pattern

I wouldn't feel comfortable knowing that all of my password for my gmail, paypal etc was on the internet except for two characters, especially when it's associated with my email address.


>so i make an online service or master file and password manager the single point of failure for all of my security

It's all compartmentalized, I have about 5 complex passwords that I've memorized for access to my email accounts and password databases.

Two separate password databases, one for important accounts that uses two factor and a second one for all the trash web accounts that you have to create.

>I wouldn't feel comfortable knowing that all of my password for my gmail, paypal etc was on the internet except for two characters
see

Still to complex, and annoying with so many webaccounts.

Easiest is just to not remember and protect things with two factor if they are actually important.

> Trusting his paswords to a pajeet add-on.

the best software for passwords is one of a similar name
you only need your master password + your child's name + sitename, and it will generate a password for that specific site on the fly.
No data is stored anywhere.

masterpasswordapp.com/