**<invalid character>** @[email protected] · Mar 29, 2019, 11:53

**<invalid character>** @[email protected] · Mar 29, 2019, 11:53

<invalid character> @[email protected]

Mar 29, 2019, 11:53

<invalid character> @[email protected]

A gentle #CoSoSec / #SecurityHygiene reminder.

Don't let your browser save your passwords, use a full password manager.

https://www.techrepublic.com/article/why-you-should-never-allow-your-web-browser-to-save-your-passwords/

The article misses one point... if you're using chrome and signed in to google, then it *does* prompt you with a password request, however, this comes with another attack vector. If your gmail password is compromised, then your passwords are too.

(myself, my chrome passwords are all fake - a sort of honeypot)

**<invalid character>** @[email protected] · 2019-03-30T19:33:20Z

<invalid character> @[email protected]

@BIFC67 -: it depends on what you need out of it. I like LastPass due to the family plan. 1password has a lot of nice features. keypass has a large following here.

Here's an invitation to #cososec to give reasons for thier preferred #passwordManager.

Mar 30, 2019, 19:33 · 0· 0· 1

**𝚘𝚙𝚒𝚎** @[email protected] · Mar 30, 2019, 19:37

**𝚘𝚙𝚒𝚎** @[email protected] · Mar 30, 2019, 19:37

Mar 30, 2019, 19:37

𝚘𝚙𝚒𝚎 @[email protected]

@0x56 @BIFC67

I KeePass...but I don't expect much features...I don't care about sync or auto entry...just want em stored...I do care about cross platform

#CoSoSec
#PasswordManager

**J. G.🇺🇸🟦** @[email protected] · Mar 30, 2019, 19:48

**J. G.🇺🇸🟦** @[email protected] · Mar 30, 2019, 19:48

Mar 30, 2019, 19:48

J. G.🇺🇸🟦 @[email protected]

@opie @BIFC67 @0x56 Bitwarden. Thanks to a few recommendations and independent research.

**GharrOfNox** @[email protected] · Mar 30, 2019, 20:41

**GharrOfNox** @[email protected] · Mar 30, 2019, 20:41

Mar 30, 2019, 20:41

GharrOfNox @[email protected]

@0x56 @BIFC67 KeePass user here. I don't trust cloud storage or cloud-based companies enough to take advantage of the LastPass subscription offered by my employer. I take the responsibility to keep my latest database of passwords managed among my devices, and never have it on my phone.