| DarkWitchClaire Giant Red Paratroopa Level: 63 Posts: 185/1408 EXP: 2044050 For next: 53102 Since: 03-19-18 Pronouns: she/her From: USA Since last post: 12 days Last activity: 12 days |
|
||
| Since I've switched to using Pale Moon full time and LastPass doesn't have a current XUL version, anyone have any recommendations for a password manager? ____________________ Dreamwidth Maybe one day I'll make a layout here. |
Originally posted by Rambly
but i also don't think it's necessarily a very good idea unless you understand the nature of the security risks and how to keep your eyes out for phishing.
I've got to disagree here. I think not having your password manager integrated with your browser makes you an easier phishing target. Observe:
Scenario A: Alice uses a password manager with a browser extension enabled. She goes to her favorite website, consoto.com, every day and lets the password manager remember the password for her. It also associates the password with consoto.com. One day, she receives a link from consanto.com, and tries to have her extension log in for her. It does not recognize the site, and so does not log her in. Confused, she looks for an answer and realizes she's being phished.
Scenario B: Bob uses an offline password manager that does integrate with his browser. He visits his favorite website, consoto.com, every day, and manually pastes the password into the browser when he wants to log in. One day, he receives a link from consanto.com, and pastes his password. Of course, it doens't work, and he soon realizes he's been phished, but maybe something happened before he could change his password, and now his account is compromised.
So I guess my point is: Browser extension seem a bit odd on the surface because they autofill for you, but really since they are harder to trick than you are, it's actually beneficial to use them.
____________________














