Hacker News Reader

Comment by IanCal | Hacker News Reader

I don't want more accounts and passwords. The security seems strictly worse than just authenticating against my email provider directly.

password managers are a thing. Takes literally 20 seconds to add a new one to a new account.

Why make logging in more complex and less secure? I use a password manager but it doesn't work as smoothly as signing in with Google.

There's no good reason not to use a password manager in 2020. I recommend this one: https://www.passwordstore.org/

No good reason until an exploit comes out that wreaks havoc.

Hard to imagine what sort of exploit could come out that could cause havoc when the encrypted passwords are stored on your device.

Imagine a vulnerability in the password manager extension that allows a hacked site to fill in and scrape every login stored in the password manager.

There’s still good reasons. Mine is using public computers (library or school), or being able to use any computer at work in private browsing mode.

It’s also trivial to have passwords which are secure and easy to remember (literally off the top of my head): MyD0gb@rk$...

That is not a secure password. The phrase "mydogbarks" appears in several word lists and hashcat has had leetspeak rules for years now.

You can use local ones like KeePassX.

Is there an android app for it?

I do use one. Doesn't mean I want another username and password to authenticate everywhere.