Is the 1password chrome extension good?

[veltix]

Anyone uses it? Any flaws or downside? Or OK? Safe to use?

 

[tigerwoods]

Bitwarden is the best and free.

Was using 1password & Lastpass.

 

[watzup_ken]

I never have the impression that these supposed “safe” password managers are actually safe. They offer convenience for sure, but leaving anything on the web is like leaving your keys under the rug outside your house hoping nobody will discover it. It is not whether there will or will not be a security breach that your data gets lost. It is a matter of when. So I recommend using them with prudence, i.e. don‘t store sensitive password with it.

 

[ronnie_gogs]

Never expect password manager to not get breached. But expecting to remember a password to 100s of accounts online and then trying common password for sites is a big security issue as well. Password managers also help to know if any of ur passwords has appeared in a hacked password list.

Yubikey 2FA is a good method for critical accounts. A bitwarden premium account and main critical email account with a 2FA Yubikey is not full proof but better than SMS 2FA.

 

[TanKianW]

I also use bitwarden. Both paid and unpaid, Cloud and self-hosted. As some has shared, it is impossible to remember 100+ (or easily 1k+) acct PWs. As a sys admin, i vouch for that. Using same password for all admin devices or writing down passwords on stick on pads are worse than using password manager. Recently just got big company CCTV system hacked with password like “pass1234”. Recommend to stop using “Lastpass”, it has recently been breached.

Make sure to implement 2FA on Yubikey or TOTP app.​

 

[veltix]

I also use bitwarden. Both paid and unpaid, Cloud and self-hosted. As some has shared, it is impossible to remember 100+ (or easily 1k+) acct PWs. As a sys admin, i vouch for that. Using same password for all admin devices or writing down passwords on stick on pads are worse than using password manager. Recently just got big company CCTV system hacked with password like “pass1234”. Recommend to stop using “Lastpass”, it has recently been breached.

Make sure to implement 2FA on Yubikey or TOTP app.​

Since Bitwarden is being hacked. Will 1password too being the next?

 

[keenklee]

IMHO.
I know some people use the 555 notebook concept. Cannot electronically get hacked.

 

[davidktw]

Anyone uses it? Any flaws or downside? Or OK? Safe to use?

Stick with the Personal local vault in 1Password if you want to keep your credentials by your side. If you are in Apple ecosystem, you can sync the personal vaults across devices via iCloud.

 

[ronnie_gogs]

Since Bitwarden is being hacked. Will 1password too being the next?

When did bitwarden get hacked ?
Lastpass was hacked in 2022 I believe.
2020 paper on commercial password managers and vulnerabilities. https://eprints.whiterose.ac.uk/158...ilities_in_Commercial_Password_Managers_2.pdf

1password had a few vulnerabilities. Maybe they are patched now.

As I said don't trust them blindly. Due diligence from your side is needed as well. If you want to run your own password manager disconnected from any cloud you can use keypass encrypted with twofish which would be impossible to brute force with traditional computing.

 

[veltix]

Maybe I try 1pw. Monthly pay. Stick to 1 see how. Does it help to auto fill? For android and pc?

 

[TanKianW]

Supposed to share this at internet networking section. But since “Lastpass” has been brought up, so might as well share here. Some sharing by Tom on the security breach at Lastpass which just show that that the weakest link almost always cause by human error. This time might even be due to using PLEX…good watch for the sys admin and cybersecurity people out there. It is important to at least do network seggregation (VLANs) if you want to expose your computers/servers/services just in case anything goes south.

​