Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Not only password managers, popular OS as well. We may extend it to hardware as well but that's even harder to tell.

I don't trust password managers for sensitive data but they're fine for most web account with limited capabilities.

I made my own secret manager based on gpg/age (literally a 5 lines bash script) and I don't run it from any proprietary OS, like Mac OS X or Android. I trust my Arch Linux installation a bit more as I know which packages are installed or updated and I know what's running on it. Also I think an attack is less likely. I also have a separate system to share secrets across devices which allow me to setup a public/private keypair (+password) on every device and then share links on unsafe channels (like consumer chat applications or email).



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: