Password Manager Security

Yes I read reviews of the paper but I did wonder how valuable it would be to the ordinary PC or other device user? The sum total appeared to be that most, perhaps not all exploitation attacks would require physical access of some kind, so it would be wise to reboot after each use to minimise the risks, or is that an over simplification?.

I have never had the time or inclination to dabble with password managers so perhaps my level of engagement was reduced. As long as banks insist on devalued security, e.g. no name checking for transfers, carrying out financial work on a device is not something my personal inclinations favour. Others must draw their own personal conclusions.

I’ve used Last pass fro ten plus years. Probably closer to 15. As I recall when android launched I had to pony up to the $1pm plan to streamline mobile use via the dolphin HD last pass plug in. The days before a last pass app, or even chrome.

Anyhow, I tell anyone that doesn’t want to use a manager, a notepad is a must, and is probably far safer than a dedicated manager. Even though ten years ago, the current status quo was to tell people to never write them down. Which I always found strange. OK if you work in an office. But for average person at home, a notepad is probably the best way to go.

In the opposite I won’t use banking on a pc. I don’t trust windows. I always use the offical app. That way it ain’t my fault if something goes wrong.

One thing I do have set up is when I open my banking app my vpm auto engages, for extra security. I’ve had my banking /ebay/amazon etc… All set up that way since pre ‘firesheep’ time. Even though that was really directed at laptop users on public WiFi.

So basically don’t use public WiFi  and your fine.

But for probably over ten years I’ve not opened my bank on a pc browser. Just use the app the bank provides. If its compromised its their issue.

Though the biggest way of losing money is from telephone payments, your putting all your trust into the hands of the underpaid kid on the other end. I personally like websites that accept PayPal or android pay. As then the site gets zero critical info. And both is just a finger print scan to do make the transaction. No looking for my wallet and  inputting details by hand. Just a simple pick android pay, and fingerprint scan to say yes.

Got to get me a password manager. Don’t let your web browser have them. 🙂