Technology

82296 readers

3354 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related news or articles.
Be excellent to each other!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
Check for duplicates before posting, duplicates may be removed
Accounts 7 days and younger will have their posts automatically removed.

founded 2 years ago

MODERATORS

212

submitted 2 weeks ago by Beep@lemmus.org to c/technology@lemmy.world

117 comments fedilink hide all child comments

Millions of people use password managers. They make accessing online services and bank accounts easy and simplify credit card payments.
Many providers promise absolute security – the data is said to be so encrypted that even the providers themselves cannot access it.
However, researchers from ETH Zurich have shown that it is possible for hackers to view and even change passwords.

you are viewing a single comment's thread
view the rest of the comments

[–] felbane@lemmy.world 94 points 2 weeks ago (16 children)

tl;dr:

If the password manager server is hacked and compromised, then syncing your passwords with the compromised server will lead to compromised passwords (duh)
None of the providers tested have (or have had in the past) compromised servers.

and an observation or two:

Vaultwarden is free, self-hostable, and doesn't rely on trust in a third party.
Keepass (and its client variants, like KeepassXC which is pretty great) is even more secure because there is no server, just an encrypted file you can store anywhere.

[–] HereIAm@lemmy.world 1 points 2 weeks ago

How would I know if my own server isn't compromised? Any of the online password managers have a hell of better chance spotting intrusion than I do.

load more comments (15 replies)