Vulnerabilities found in web-based password managers

Snapped! · 07-18-2014, 02:55 PM

http://www.net-security.org/secworld.php?id=17111

ondoho · 07-18-2014, 04:10 PM

i think the keyword here is "web-based" - i, too, use a password manager, but i would have to be 500% sure before i upload the password database to the internet - even if it's manually on my own server -

so how much more insecure are so-called free (or even paid) third-party online services? it's common sense, really, to avoid those.

Snapped! · 07-18-2014, 05:10 PM

I don't use any of those mentioned in the article, I use keepassX which stores the passwords in an encrypted file locally on the machine.

273 · 07-18-2014, 05:12 PM

I'd rather use a piece of paer in my wallet and one in a safe place. If I lose my wallet I get it out of the safe place and change my passwords.

frankbell · 07-18-2014, 09:26 PM

I think this falls into the "this surprises you how?" category.

I also use KeePassX and am quite happy with it.