Reply to thread

Message

<blockquote data-quote="Ink" data-source="post: 1052329" data-attributes="member: 3">No, the password managers purpose is to generate secure passwords, not the other way around.Your Email Password should not be your Master Password.In the examples below let’s ignore 2FA to make it easier to understand:<ul>
<li data-xf-list-type="ul">Email Password (is) Master Password<ul>
<li data-xf-list-type="ul">Eg. Proton Mail password gets leaked, then the Proton Pass vault is compromised.</li>
</ul></li>
<li data-xf-list-type="ul">Email Password (is not) Master Password<ul>
<li data-xf-list-type="ul">Eg. Proton Mail password gets leaked, then the Bitwarden vault is not compromised.</li>
</ul></li>
</ul>As far as I know, only 1Password implements a Secret Key to make it impossible to compromise your vault if your password gets leaked.<ul>
<li data-xf-list-type="ul"><a href="https://blog.1password.com/what-the-secret-key-does/" target="_blank">Secret Key: What is it, and how does it protect you? | 1Password</a></li>
<li data-xf-list-type="ul"><a href="https://support.1password.com/secret-key/" target="_blank">Find your Secret Key or Setup Code | 1Password</a></li>
</ul>By properly using a secure password manager, its users only need to memorise the Master Password, that’s it. One password to rule them all.</blockquote>

[QUOTE="Ink, post: 1052329, member: 3"] No, the password managers purpose is to generate secure passwords, not the other way around. [SIZE=4][B]Your Email Password [U]should not[/U] be your Master Password.[/B][/SIZE] In the examples below let’s ignore 2FA to make it easier to understand: [LIST] [*]Email Password ([B]is[/B]) Master Password [LIST] [*]Eg. Proton Mail password gets leaked, then the Proton Pass vault is compromised. [/LIST] [*]Email Password ([B]is not[/B]) Master Password [LIST] [*]Eg. Proton Mail password gets leaked, then the Bitwarden vault is not compromised. [/LIST] [/LIST] As far as I know, only 1Password implements a Secret Key to make it impossible to compromise your vault if your password gets leaked. [LIST] [*][URL='https://blog.1password.com/what-the-secret-key-does/']Secret Key: What is it, and how does it protect you? | 1Password[/URL] [*][URL='https://support.1password.com/secret-key/']Find your Secret Key or Setup Code | 1Password[/URL] [/LIST] By properly using a secure password manager, its users only need to memorise the Master Password, that’s it. [U]One password to rule them all[/U]. [/QUOTE]

Verification