Hacker News Reader

Comment by martinald | Hacker News Reader

This is getting ridiculous now. I've had my password stolen probably at least four times this year.

I think that the browser developers should push for a keychain of random, generated passwords and use as many UI pointers as possible to push people to use these. Apple's implementation in Safari is what we should be aiming for, but pretty useless to me as I have Linux/Windows/Android devices that don't support Safari.

View on HN

Have you tried KeePass or LastPass? They work pretty well on just about every platform.

The problem with KeePass, LastPass, etc. is that you need to hear about them, look them up, and install them. Things would be much simpler if the browser included a similar functionality by default.

Unfortunately, all three major browser vendors seem too busy pushing their own single sign-on schemes (Chrome: Google account, IE: Microsoft account, Mozilla: Persona). So they're unlikely to pay any attention to plain old password generation and storage for the foreseeable future. Which is a real pity because passwords aren't going to disappear overnight.

http://www.gottabemobile.com/2013/10/22/setup-icloud-keychai...

http://www.chromium.org/developers/design-documents/password...

Looks like this is being done.

Instead of using a cross-browser solution that works today, you're complaining that the browser makers haven't created their own schemes.

I use LastPass, thank you very much. My only complaint is that most other people don't, and I think browser vendors are partly to blame for not doing what they can to bring about a large-scale adoption of password generation & storage best practices.

Are these browser plugins? Are any browser plugin password generators secure enough to be used?

LastPass is a browser plugin. KeePass is a standalone application but it can pass credentials to your browser to save you the trouble of having to copy/paste them.

I've been using LastPass for a long time and even purchased their their Enterprise version for $work. I also use KeePass and recommend both.

Reply on news.ycombinator.com