kadu@lemmy.world 1 year ago
Google only just recently introduced encrypted passwords… Before they were stored in plain text on your computer… Tho I’m not even sure how that encryption even works.
So… It may not have leaked yet (or maybe it has but Google suppresses everything, who knows) but I wouldn’t trust it to keep something safe.
There nothing to fix in an OS. Windows and chrome have vulnerabilities which are unfixable by regular people. What about malware? What about other people knowing the password to your pc?
It’s impossible to trust an OS to not get hacked, because it’s always the hackers or OS running behind the other.
You can replace the OS with one you trust more. Can also replace the browser, and “irregular people” can fix stuff in OpenSource OSs and browsers. Malware is easy to avoid, just don’t execute random stuff. Other people knowing the password to your PC, is up to you.
Hackers generally don’t hack OSs, users are much easier to hack.
I’d be worried about losing access to the entirety of your passwords if Google up and decides that one day your account is suspended. There’s been a few reports historically where someone gets their Gmail account suspended for some mistaken reason and all their associated access gets pulled (e.g. from drive, sheets, etc)
You are saying that bitwarden suspended your account?
Bitwarden offers an encrypted backup…
Google has maybe a plain text export.
Bitwarden has run flawless for me for multiple years.
I got a Google account shut down after some spammer started using that email as the sender address. I somehow got in contact with an employee (friend of a friend) that checked on the account and verified it wasn’t my fault and reopened it, but a week later it got closed automatically again.
So it can happen at no fault on your own, and impossible to do anything about.
My Google account has been rock solid from the day I created it as a child
Hopefully you were of legal age to accept the Terms of Service, otherwise it might’ve been an irregular account all this time.
…so far.
For those that don’t mind self-hosting, which can be as easy as just running syncthing or resilio sync on your NAS, I can really recommend keepass.
Me with interest, but no technical knowledge reading your comment:
which can be as easy as
:-)
running syncthing or resilio sync on your NAS
:-(
I didn’t understand any of those words
A NAS is a home storage server, like Synology that you can use to store images, videos and backups, etc on so you can access them from any computer or device in your home. With a couple of clicks, they can easily run applications like Syncthing or Resilio Sync, which are kinda like Dropbox, except you don’t have to pay Dropbox, you’ll just be storing the files on your own service.
If that’s too much to handle, you can still just store your Keepass file in Dropbox, so that it’s available on all your devices. But in the end you’ll still be storing your personal data on someone else’s harddisk.
So in short, is at easy as using a prefab service? No, you’ll have to invest some time, money, and knowledge yourself. But in the end, your data is not gathered in silo together with countless other users, which makes it a lot less attractive for hackers to try and steal it.
The sprinkles contain potassium benzoate :-|
Self hosting is less appealing for criminals, though. Especially if the protocol is “vanilla” like ssh.
When you hack LastPass you know what you’ll find, millions of passwords. When you hack a dude ssh you have one chance over one million that there is one dude password wallet.
It doesn’t make financial sense to hack self hosting (unless it’s specific server software)
There are plenty of use cases for going after self hosters. Bot farms are basically made up of “regular” computers infected with malware.
While you’re at it and have access to tens of thousands computers, also grabbing their passwords is just a nice bonus.
As a non-Google user, Lemmy is only “Chrome bad”. They’re “Android is the only way”
Well chrome = bad. Just look at all the anti-competition things they are implementing just because they are the leaders on the market.
Now they are blocking cookies, it’s great isn’t it? NO! now they are targeting you through your browser history while blocking competing cookies.
Manifest V3 introduced by Google, that’s amazing, now ad blockers won’t be able to update their list individually. It’s amazing isn’t it? Being able to hinder the adblockers when your revenues comes from ads.
mustardman@discuss.tchncs.de 1 year ago
Firefox’s password manager is probably just as good.
Psythik@lemm.ee 1 year ago
“Probably”? It’s the best! I never have to worry about memorizing 500 different passwords cause Firefox automatically syncs my passwords across every device I use without me even having to think about it.
fushuan@lemm.ee 1 year ago
eh, it doesn’t work for credentials of phone apps, bitwarden does and you can access those passwords if you log in into the web version if you are on an unknown pc.
HaggierRapscallier@feddit.nl 1 year ago
It takes a few taps, but firefox’s password service appears when you click the autofill option for me.
oce@jlai.lu 1 year ago
It’s great.