Hacker News Reader

Comment by pzxc | Hacker News Reader

The alternative is not to give up on password management completely, but to use a proper password manager like KeePass.

What if you took Firefox or chrome and replaced the password manager with a keepass compatible system by default and kept the usability?

If password managers are going to become popular for end users it needs to be something that’s built into the browser and interopable. I’d love to see this turned into a standard that all browser and device manufacturers (when I log into an app on my phone the password manager should be integrated) can implement.

As long as there is no default support for keepass, maybe kee/keefox will fit the bill?

https://addons.mozilla.org/de/firefox/addon/keefox/

I agree with you on this one, KeePass is way to go compared to relying on browser's password manager.

Only wish these password management functionalities (not tool itself, but whole mess switching back and forth between target app/password manager) are more pleasing than the way it is now on mobile...

Android 8 provides an autofill API for this purpose! But it's only working in apps, not in the browser

I am all for using a better password manager. In fact, with PfP: Pain-free Passwords I developed one myself - and I invested much thought into making sure the master password cannot realistically be guessed unless it is absolutely trivial. However, most people will go with whatever is built in. So no excuses for browser makers to offer something that has been known to be very suboptimal for at least nine years.

Reply on news.ycombinator.com