Viewing a single comment thread. View all comments

Shaila_boof t1_j81gqoa wrote

Reply to comment by CervantesX in Millions of passwords stolen from LastPass earlier than company disclosed: Report by BasedSweet

I save all my password in the browser saving password thing, is it bad?

2

NiftyNumber t1_j81n0vi wrote

Information is encrypted before sending to Google ( I am assuming you are using chrome), so even Google doesn't know your passwords. Therefore, generally pretty safe.

3

teh_maxh t1_j82rr2e wrote

> Information is encrypted before sending to Google ( I am assuming you are using chrome),

That's a new feature (only since June 2022), and AFAIK isn't automatically enabled.

2

Fickle-Razzmatazz827 t1_j85kajk wrote

Definitely not. It's been used way longer. No one sends plain text passwords since the late 2000s unless it's an amateur made website.

1

teh_maxh t1_j864onn wrote

I guess Google is made by amateurs, since on-device encryption was introduced just last year.

1

Fickle-Razzmatazz827 t1_j8729eg wrote

completely a different thing and this encrypts using your device and you need to enter your password to decrypt it. The password is still is not being sent to google as plain text and has never been.

1

teh_maxh t1_j87uadc wrote

Are you really arguing that "well, technically it's sent via TLS" is actually adequate for a password manager?

1

SomethingMatter t1_j81tph3 wrote

It's not the best. Depending on how things are set up, anyone getting access to your PC can log onto any of the sites that you log into. You are also tied to the browser. e.g. Want to use an iPhone and chrome, tough. There are free options for password managers.

2

MrPissedHimself t1_j81v48q wrote

Think if they're saved they go head to saved passwords and click a button to see it in clear text. Might have changed now but I remember doing that on a publicly used computer a few years back

1

HanaBothWays t1_j826yvl wrote

It’s probably not bad and it’s better than nothing, but it’s less portable than a good password manager.

1

Infinite-Eggs t1_j82eqo9 wrote

It's better than typing them manually. The main point is that all your passwords should be complex and unique. That should help you in 99% of cases.

1

CervantesX t1_j88dpai wrote

It's not ideal, but it's common. Best practice is to at least not save your hyper sensitive logins like bank pwds.

1