Warning: I used to ignore password managers until a coworker called them a security risk

I always thought password managers were the gold standard until my team lead Dave pointed out that the one I was using, LastPass, had that big breach back in 2022. He showed me how some managers store your master password in plaintext on their servers, which totally changed my mind. Has anyone else switched to a local-only manager or just gone back to writing stuff down on paper?

2 comments

2 Comments

emma5226d ago

But honestly, isn't putting all your passwords in one basket just asking for trouble? Even if you use a local manager like KeePass, you're still one keylogger or memory dump away from losing everything at once. I'd rather have 50 different passwords spread across sticky notes in my desk drawer than trust some piece of software that could have a zero-day exploit nobody knows about yet. At least with paper, a hacker would need to break into my actual house.

pat_murray166d ago

You mentioned LastPass had that big breach in 2022 - did your team lead ever explain how that actually let hackers get at people's passwords?