Hacker News Reader

Now I just recommend to people (who don't understand password managers) to use chrome's built-in feature.

It's better than using the same password.

I used to think this, but I think this is actually bad advice for a few reasons.

1. People are bad at making new passwords 2. Someone might clear their browser history and delete the logins as a result. 3. Lock-in into the Chrome ecosystem.

I personally use KeePass, but I understand it is a bit cumbersome to carry around a USB stick.

I'd recommend LastPass to those who don't understand simply because it has a free tier, but everyone else should seriously consider paying the 2$ a month for whichever service they use.

Chrome now has a "generate password" option in password fields, and a page where the passwords can be managed.

For the people I'm talking about, installing and maintaining a "real" password manager isn't going to happen. The alternative is for them to continue using "Nameofcat1" for every damn site.

It's a reasonable trade-off.

I tried using Chrome's built in feature but I found the password field was set up wrong on many sites and therefore the "Generate Strong Password" wouldn't be an option. I've since started using BitWarden.

Reply on news.ycombinator.com