Asklemmy

43744 readers

1154 users here now

A loosely moderated place to ask open-ended questions

Search asklemmy 🔍

If your post meets the following criteria, it's welcome here!

Open-ended question
Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions. Assume best intent and be excellent to each other.
Not regarding using or support for Lemmy: context, see the list of support communities and tools for finding communities below
Not ad nauseam inducing: please make sure it is a question that would be new to most members
An actual topic of discussion

Looking for support?

Looking for a community?

Lemmyverse: community search
sub.rehab: maps old subreddits to fediverse options, marks official as such
!lemmy411@lemmy.ca: a community for finding communities

~Icon~ ~by~ ~@Double_A@discuss.tchncs.de~

founded 5 years ago

MODERATORS

440

What industry secret are you aware of that most people aren't? (programming.dev)

submitted 4 months ago by protein@programming.dev to c/asklemmy@lemmy.ml

638 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] kevincox@lemmy.ml 11 points 4 months ago* (last edited 4 months ago) (1 children)

The reason I say browser password manager is two main reasons:

It is absolutely critical that it checks the domain to prevent phishing.
People already have a browser and are often logged into some sort of sync. It is a small step to use it.

So yes, if you want to use a different password manager go right ahead, as long as it checks the domain before filling the password.

[–] dev_null@lemmy.ml 5 points 4 months ago (2 children)

What do you mean a password manager that checks the domain? Isn't the auto fill based on the domain? I can't imagine how a password manager could fill a password without checking the domain, it wouldn't know which password to fill after all. Do any actually exist?

[–] kevincox@lemmy.ml 2 points 4 months ago (1 children)

There are some password managers where you need to either manually look up passwords and copy+paste or autotype them or select the correct password from a dropdown. Some of these will come with an optional browser extension which mitigates this but some don't really tract domain metadata in a concrete way to do this linking.

Some examples would be Pass which doesn't have any standard metadata for domain/URL info (although some informal schemes are used by various tools including browser-integration extensions) and KeePass which has the metadata but doesn't come with a browser extension by default.

[–] dev_null@lemmy.ml 3 points 4 months ago

I see, so you mean manually getting the password out of the manager instead of domain based autofill.

[–] HubertManne@moist.catsweat.com 1 points 4 months ago

I was a bit confused on this to. Are their ones that constantly spam all your passwords at every opportunity???