Is Firefox browser's password manager safe? If not, Are there any other free safe alternatives?
Is Firefox browser's password manager safe? If not, Are there any other free safe alternatives?
thank you.
You're viewing a single thread.
I wouldn't use any browser password manager, last time I even looked at one they were saving my passwords in plaintext!
Bitwarden, one pass, keepass, basically anything other than LastPass should be good!
without a master password, firefox just uses a simple scheme it can reverse. if you use a master password, though, then that password is needed.
chromium browsers now use windows credentials, if you have no password on a local windows account, then none is needed to extract the passwords from the browser. .
It seems I'm not up-to-date. What's wrong with LastPass?
Edit: nevermind. I just googled it. [https://www.notebookcheck.com/Ist-LastPass-noch-sicher-Experten-kritisieren-den-Passwortmanager.677484.0.html)(url) Here is an article about it (in German), for anyone else wondering.
Seems like I will have to find a way to move my vault to another password manager. I hope I can find a way of doing this safely without needing to do that manually... So I am grateful for any advice!
https://bitwarden.com/help/import-from-lastpass/
Here's how you do it with Bitwarden, in case you decide on that
Thank you! Bitwarden seems to be mentioned a lot here. I'm gonna look into it.
Other than the terrible security record? That they are proprietary.
I moved from LastPass to Bitwarden. It was quite easy to move everything over. I've been using Bitwarden for several years now and have no complains. I believe Bitwarden has a guide on how to move your content from LastPass.
Edit: I use Bitwarden on both pc and mobile. No issues.
I migrated from lastpass to pass using pass-import. Worked wonders.
thank you for the rec! a small doubt even though they are in plaintext, when the hackers can't log in aren't they safe tho or is it easy to hack?
Most viruses now start off by scooping up all saved browser passwords automatically then sending them to a remote server. So if one of those ever goes off on your system you are at quite a risk. Especially since there are really good other options that aren't vulnerable to that