What industry secret are you aware of that most people aren't?

lil_shi@programming.dev to Asklemmy@lemmy.ml – 429 points –
620

You are viewing a single comment

The reason I say browser password manager is two main reasons:

  1. It is absolutely critical that it checks the domain to prevent phishing.
  2. People already have a browser and are often logged into some sort of sync. It is a small step to use it.

So yes, if you want to use a different password manager go right ahead, as long as it checks the domain before filling the password.

What do you mean a password manager that checks the domain? Isn't the auto fill based on the domain? I can't imagine how a password manager could fill a password without checking the domain, it wouldn't know which password to fill after all. Do any actually exist?

There are some password managers where you need to either manually look up passwords and copy+paste or autotype them or select the correct password from a dropdown. Some of these will come with an optional browser extension which mitigates this but some don't really tract domain metadata in a concrete way to do this linking.

Some examples would be Pass which doesn't have any standard metadata for domain/URL info (although some informal schemes are used by various tools including browser-integration extensions) and KeePass which has the metadata but doesn't come with a browser extension by default.

I see, so you mean manually getting the password out of the manager instead of domain based autofill.

I was a bit confused on this to. Are their ones that constantly spam all your passwords at every opportunity???