Hacker News Reader

Chrome's password manager has a much, much better security record than any "proper password manager".

What? Noo... When you consider the chrome password manager you must consider the chrome binary as a whole. Chrome has had significantly more security issues than 100% of password managers. Of course -- its a more complex set of code.

Its about surface area. A password manager that has no browser integration is by its nature less likely to be compromised, as there are far less vectors of exploitation.

Don't store your passwords in the browser. Use a proper password manager. How its gets from PM to B is up to your risk appetite.

Not really. For one, anybody that can use your computer can see a plaintext list of your Chrome passwords directly from the Chrome options menu. It's an incredibly primitive system.

this part though we usually have good defense against. how many people are using your computer? do you have a login with a password? do you have FDE? when was the last time you handed your laptop over for someone to use without you being right there?

the browser password managers are good enough for most uses

Reply on news.ycombinator.com