DEV Community

Cover image for Outsourcing security with 1Password, Authy, and Privacy.com

Outsourcing security with 1Password, Authy, and Privacy.com

Victoria Drake on March 16, 2020

We've already got enough to deal with without worrying about our cybersecurity. When humans are busy and under stress, we tend to get lax in less-o...
Collapse
 
chadundrwood profile image
chad.

I adopted 1Password a long time ago and since gotten to get my wife to join me. An advantage you didn’t mention is the ability for couples to be able to share strong logins with no interaction. For my family this has been a huge time saver. Thanks for spreading the word to more people.

Collapse
 
victoria profile image
Victoria Drake

That's great! Thanks for adding, @chad !

Collapse
 
savagepixie profile image
SavagePixie • Edited

Here's a question about password managers that you might be able to help answer. I have read that using the password manager that comes with your browser isn't secure enough. But why is that?

I imagine that if you get a product whose whole purpose is to serve as a password manager, it'll do a better job at it than if you get an additional feature of a browser. But is it just that they use better encryption algorithms, or is there something else that makes browser password managers unsafe?

EDIT: Great article, by the way. As usual, I really enjoyed reading it and found it highly informative.

Collapse
 
victoria profile image
Victoria Drake

Thanks @savagepixie ! And thanks for raising the question. I think @rob is on the right track. Browser password managers used to be a lot less secure than they are now (2013) but even recently, I've seen some claim they're not very well thought-out. I haven't tested them myself, so I can't confirm or deny.

I'll note, though, that not all browsers continue to pay the same level of attention. Firefox has Lockwise, which is sort of a browser-based password manager, but one much more similar to 1Password than any other I've seen. It has standalone apps, and uses your Firefox account to encrypt your synced data using your password with (they say) 256-bit encryption. Mozilla also has a partnership with Have I Been Pwned, so you'll get alerts if it detects previously breached credentials. As a bonus, it's open source.

Sounds perfect; so why am I not using Lockwise? I'm a Mozilla fan in general; open source, even more so. Unfortunately, in the world of password managers, Lockwise is relatively new. Even apps built by excellent people need some time to work out the kinks. I'll probably check back in a couple years and re-evaluate.

TL;DR: depends on the password manager.