[ELI5] Why are online “password lockers” considered secure?

1.94K views

It seems to me (hence this question), that storing all your passwords online and accessing them with a single “unlock” password would be extremely dangerous. If the locker service is itself hacked, then the hackers will have ALL your passwords for the price of getting one password.

In: Technology

15 Answers

Anonymous 0 Comments

Why these are secure is somewhat complicated.

Firstly, the locker storing your passwords is no more secure than good security of passwords at your bank, or other best-practice following web apps. And…putting your password in the locker never makes it more secure than how it’s stored at some site. In fact, it ALWAYS makes it less secure – you’ve added a second vector for exploit, attack, poor management, etc.

What it IS more secure than is the real-world crap people do to keep track of passwords in a world that requires them to have so many. It’s more secure than having a cheat sheet on your computer, a post-it in your desk, a little note in your wallet. So…to understand the security of adding a second location for passwords – and one that stores all your important ones – you have to understand the alternative methods for storing lots of passwords.

If you can keep it all in your head, then that is more secure than a password locker.

You are viewing 1 out of 15 answers, click here to view all answers.