Hacker News Reader

I use http://clipperz.com/ which is zero knowledge http://www.clipperz.com/users/marco/blog/2007/08/24/anatomy_...

You can use LastPass as completely zero knowledge app by not utilizing the binary extensions for Chrome or Firefox.

I prefer KeePass (2 or X) with the encrypted pwd database backed up to SpiderOak (or Tarsnap, the only two really secure backup services I know of).

OSS, local not cloud-based, encrypted pwd file, excellent pwd generator, easy to use.

I use SuperGenPass, it's comparable and requires storing no state, thus nothing to lose or back up.

Is it still completely vulnerable?

http://akibjorklund.com/2009/supergenpass-is-not-that-secure

I use EngimaPass[1], which, as an extension, renders outside the DOM, so it's not.

[1] https://chrome.google.com/webstore/detail/enigmapass/bgkipgf...

Thank you, I was looking for one and thinking of buying a yubikey as well.

Downside: You can never change your SuperGenPass password, even if a site requires you to.

This is a huge downside -- accidentally type your password on a device you shouldn't have? You now have to update every site rather than just updating your master password.