this post was submitted on 18 Feb 2026
29 points (78.4% liked)

Privacy

46307 readers
2214 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 6 years ago
MODERATORS
 

cross-posted from: https://infosec.pub/post/42164102

Researchers demo weaknesses affecting some of the most popular options Academics say they found a series of flaws affecting three popular password managers, all of which claim to protect user credentials in the event that their servers are compromised.…

you are viewing a single comment's thread
view the rest of the comments
[–] ScoffingLizard@lemmy.dbzer0.com 1 points 1 day ago (3 children)

Am I the only person here that never used one just because of this? They all sounded too sus to me.

[–] muhyb@programming.dev 13 points 1 day ago (1 children)

You can use local ones like KeePassXC.

[–] ScoffingLizard@lemmy.dbzer0.com 2 points 16 hours ago (1 children)

I have a degoogled phone with e/OS. I might try if they get a bit further into my use of their products and security. It sure would simplify methods.

[–] muhyb@programming.dev 1 points 15 hours ago (1 children)

I have a similar setup with LineageOS. I use KeePassXC on PC (KeePassDX on Android). I can sync them via Nextcloud with peace in mind because the database is already encrypted. Syncthing-fork also works if you want completely local.

I'm sure e/OS already has a password vault app in their list but if not KeePassXC is fully local out of the box and can be used with DX on Android.

It's far secure than Firefox's built-in password manager.

[–] ScoffingLizard@lemmy.dbzer0.com 1 points 18 minutes ago

I've only been using e/OS for a few months. Once I gain more confidence in the OS I can certainly try. I'm still super paranoid. It's a lineage fork so there is update lag and possible security limitations in the OS itself. I'm just not sure yet.

[–] autonomoususer@lemmy.world 5 points 1 day ago* (last edited 1 day ago) (3 children)

Keeping them in your head? So, your passwords must be shit, lmao.

Zero threat prioritisation.

[–] Tenderizer78@lemmy.ml 8 points 1 day ago (1 children)
[–] ScoffingLizard@lemmy.dbzer0.com 1 points 21 minutes ago

So checkmustanglithium]

[–] ScoffingLizard@lemmy.dbzer0.com 0 points 17 hours ago (1 children)
[–] autonomoususer@lemmy.world -1 points 13 hours ago

Shit passwords confirmed

[–] Horse@lemmygrad.ml 5 points 1 day ago (1 children)

for the average person's home pc, writing them down on a sticky note or notebook is sufficient
if someone unauthorized is physically in your house then you have bigger problems than them knowing your facebook password

[–] ShortN0te@lemmy.ml 1 points 21 hours ago

And those handwritten notes are secure random passwords and never repeat?

Just too much work for the average person and too inconvenient to type.

[–] ToTheGraveMyLove@sh.itjust.works 4 points 1 day ago (1 children)
[–] ScoffingLizard@lemmy.dbzer0.com 1 points 17 hours ago

I have a few that I just have off the wall for a few things and I memorize those. Some I just use ssh keys. Others go off a pattern and I put hints in a file to figure it out. The account itself is not even put in this file, so I have to just know what the hints mean for both the account and what password pattern hints go with them. Usually, the user IDs are something I store in this file, because those get too tough for the aforementioned methods of determinism.