Comment on Password managers are less secure than promised
1984@lemmy.today 1 week agoI was also just looking for bitwarden information. Its just the best password manager and has never failed to do its job.
Comment on Password managers are less secure than promised
1984@lemmy.today 1 week agoI was also just looking for bitwarden information. Its just the best password manager and has never failed to do its job.
ftbd@feddit.org 1 week ago
They advertise that passwords are only stored on the server in encrypted form, meaning they couldn’t read them even if they wanted to (or were forced to by a government agency) and you don’t have to trust them not to. This paper shows that several vulnerabilities exist in the protocol which could be exploited by malicious code running on the server (injected by hackers or a government agency), which would then allow an attacker to obtain cleartext-passwords. So you do, in fact, have to trust the servers integrity.
1984@lemmy.today 1 week ago
Thank you for taking the time to understand and comment, very valuable.