Reply to thread

Message

<blockquote data-quote="mlnevese" data-source="post: 1016745" data-attributes="member: 36157">It doesn&#039;t really matter if hackers get access to your online vault files as they are strongly encrypted. 1Password, for instance, goes as far as using a double key encryption, so good luck decrypting it before the sun becomes a big red ball of plasma...You are in trouble only if you are using an amazingly weak key that may be broken by a brute force attack, Abcde12345, for instance. With services that use double key encryption even that won&#039;t be an immediate danger to you because they have to get the second key right as well. Or if any password manager out there uses an incredibly weak encryption algorithm, which I think is not the case for any of them. Or even worst if the password manager keeps your master key as a plain text file anywhere in their servers, which I hop none of them are stupid enough to do because if any of them are, even local stored vaults will be useless because all the hacker has to do is copy your vault and the text file.Of course, if any company out there uses a backdoor and that is discovered, you&#039;re in trouble.</blockquote>

[QUOTE="mlnevese, post: 1016745, member: 36157"] It doesn't really matter if hackers get access to your online vault files as they are strongly encrypted. 1Password, for instance, goes as far as using a double key encryption, so good luck decrypting it before the sun becomes a big red ball of plasma... You are in trouble only if you are using an amazingly weak key that may be broken by a brute force attack, Abcde12345, for instance. With services that use double key encryption even that won't be an immediate danger to you because they have to get the second key right as well. Or if any password manager out there uses an incredibly weak encryption algorithm, which I think is not the case for any of them. Or even worst if the password manager keeps your master key as a plain text file anywhere in their servers, which I hop none of them are stupid enough to do because if any of them are, even local stored vaults will be useless because all the hacker has to do is copy your vault and the text file. Of course, if any company out there uses a backdoor and that is discovered, you're in trouble. [/QUOTE]

Verification