323

Larion Studios forum stores your passwords in unhashed plaintext. (lemmy.world)

submitted 9 months ago by Cabrio@lemmy.world to c/games@lemmy.world

217 comments fedilink hide all child comments

Larion Studios forum stores your passwords in unhashed plaintext. Don't use a password there that you've used anywhere else.

you are viewing a single comment's thread
view the rest of the comments

[-] TigrisMorte@kbin.social 74 points 9 months ago

https://bitwarden.com/

[-] Spacecraft@lemmy.world 11 points 9 months ago

I want to suggest 1Password even though it’s not free (I used bitwarden for many years though). It has its own SSH agent which is a dream.

[-] Belazor@lemmy.world 7 points 9 months ago

The only problem with their SSH agent is, if you store let’s say 6 keys and the server is set to accept a maximum of 5 keys before booting you, and the correct key happens to be key number 6, you can end up being IP banned.

This happened to me on my own server :P

That being said, my experience was using the very first GA release of their SSH Agent, so it’s possible the problem has been sorted by now.

[-] miroppb@kbin.social 10 points 9 months ago

BitWarden is awesome. Been using it since 2 of my colleagues went to work for them

[-] brb@sh.itjust.works 1 points 9 months ago

How is this better than Firefox built-in password manager?

[-] Itsamelemmy@lemmy.zip 4 points 9 months ago* (last edited 9 months ago)

Firefox is extremely easy to get your password from behind the *** if it autofills. Requires physical access, but literally takes seconds. Right click the field, inspect and change the field type from password to text.

[-] brb@sh.itjust.works 2 points 9 months ago

So if my passwords are behind fingerprint there's no problem?

[-] Itsamelemmy@lemmy.zip 1 points 9 months ago

On mobile I'm assuming. I personally don't know a way to bypass the fingerprint locks. And if you're also having Firefox create random difficult passwords, its significantly better than reusing the same one. So you're probably a much harder target than the majority of people. I'd have to double check but I think even on desktop if you have a master password for Firefox and don't just have logins auto filled you're probably good there too.