Libraries for java exist secure password hashing cry.pto analysis wiki
на канале: Maris Eduardo
Libraries for java exist secure password hashing cry.pto analysis wiki
Disclosure I wor.k for 1Password . My colleague Jeffrey Goldberg wrote an excellent answer to a very similar qution. Heres an updated version of his reply. I wont attempt to speak for other password managers, but with 1Password, you co.ntrol your data. We have no ability to acquire your secrets. That not only protects you from us, but it protects you from anyone who compromises us. But lets start with risks of not using a password manager You reuse passwords across many sites and services. This really is dangerous. You use weak passwords for some important sites and services. This is less of a risk unless its combined with password reuse, in which case it is catastrophic. You can fall vic.tim to phishing at.tacks because you can be tricked into entering your username and password into something other than the actual site you think it is for. You use some system for creating or remembering your passwords that allows someone who has discovered one or two of them to have a good guess at what the others are. This is like the reuse case but here the passwords are related to each other instead of directly reused. On the other hand, lets look at the biggt risk of using a password manager You forget your Master Password. This is the single biggt risk and why we encourage people to write down their Master Passwords in their Emergency Kit and store it in a safe location. Thats really the only meaningful risk. There are other, much smaller risks, but theyre not nearly as big as that one. Heres how the smaller risks apply to 1Password All your eggs in one basket. This is less of a risk than it might first appear because the alternative — password reuse — also puts multiple eggs in shared baskets password reuse, and extremely weak baskets weak passwords. When you reuse passwords, every site and service where you use the same password is vulnerable if that password is discovered. That 1Password gets had. This is less of a risk than it might first appear not because its impossible for 1Password to get had, but because 1Password is designed with full end to end encryption , so the co.nsequences of 1Password getting had would not be a threat to our customers. That the folks at 1Password would turn evil. This isnt something that we expect to happen, but again, weve designed 1Password so that we lack the capability to acquire your secrets . This is really just a variant of the previous point. That theres something malicious hidden in the code. 1Password has an open security design , and security experts are co.ntinually auditing 1Password to coirm it has a solid foundation. We dont rely on proprietary, untted encryption. That were abducted by aliens and youre locked out of your data. Again, our overall design protects you from this. Its always possible to export your data from 1Password , and weve documented our data format so that even if we were to disappear, your data is yours. As you can see, the biggt risk is forgetting your Master Password or losing your Secret Key , and you can mitigate this yourself by following our advice for the Emergency Kit we provide when you sign up for 1Password Print a copy or store it on a USB flash drive. Dont store it online or email it. Fill in your Master Password. In an emergency, you or your loved one will be glad to have all your account details in one place. Keep it somewhere safe, like with your passport or birth certificate. Give a copy to a trusted loved one, like your spouse or someone in your will.