this post was submitted on 17 Feb 2026
254 points (89.9% liked)

Technology

81451 readers
5677 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago
MODERATORS
L3s@lemmy.world
enu@lemmy.world
technopagan@lemmy.world
L4s@lemmy.world
L3s@hackingne.ws
254
Password managers are less secure than promised (ethz.ch)
submitted 2 days ago by Beep@lemmus.org to c/technology@lemmy.world
117 comments fedilink hide all child comments
 
  • Millions of people use password managers. They make accessing online services and bank accounts easy and simplify credit card payments.
  • Many providers promise absolute security – the data is said to be so encrypted that even the providers themselves cannot access it.
  • However, researchers from ETH Zurich have shown that it is possible for hackers to view and even change passwords.
you are viewing a single comment's thread
view the rest of the comments
[–] Appoxo@lemmy.dbzer0.com 3 points 21 hours ago (1 children)

Great.
I am now your spouse and you want to give me access to the flash drive. What now?

New requirement: I have several passwords I want to give you access to as well. What now?

As with everything: Your solution may work for yourself and a few others. The majority don't want to collect 5 flash drives in different locations every 3 months to update a file (and making sure it's the correct vault they have copied)

[–] shortwavesurfer@lemmy.zip 1 points 20 hours ago (1 children)

PThe master copy stays on my device. If I need to give somebody access to a specific password, I just give them that password locally and they put it in their password manager for that account.

Same thing occurs if they need to give me a password. They give me the password. I put it in my password manager and then I'm the one who updates the flash drives on the rotating basis like I mentioned above.

[–] Appoxo@lemmy.dbzer0.com 1 points 18 hours ago (1 children)

Great.
Now your data is (potentially) exactly where you are trying to keep it out of.

So you made it more cumbersome to yourself by keeping your data as local as possible, yet still chosing to give up the tiny sliver of additional security for the comfort of others.

I don't want to be annoying. But I hope you see what I am trying to convey.

[–] shortwavesurfer@lemmy.zip 1 points 33 minutes ago

I'm sorry, but I really don't see what you're trying to convey. The people I give my passwords to also don't use cloud password managers.