@kevinohlsson KeePass generate random passwords and save them in an encrypted vault. So you need a way to sync your vault beetween all your devices. LessPass recreate a unique password for every site base on unique information you know. So you don't need to sync your passwords. Learn more on https://blog.lesspass.com
Report
I still think passwords shouldn't be handled in any browser context (apart from input, naturally).
Report
Surely this means that it's easier to find the way it encrypts passwords? (sorry, noob with this stuff)
Actually, this makes sense but I guess it requires an extra layer of security before generating the password in untrusted browsers. What do you think about adding two-step verification before generating the password? Would it make the system safer?
@guillaume20100 I mean new devices that the user is trying to regenerate his/her password so in case an attacker grabs user's credentials, he/she will still need to verify before regenerating the same password.
@sekodev In the case of public computers, I would assume that the machine is compromised. I certainly wouldn't do any banking on such a machine. If I need a password for a service, I will use my phone to create my password, and visually copy it on the compromised computer. But personaly I don't use services on public computer and never log in. And I recommend to do so. Hope it answers your question
How timely. I'm still using KeyPass since most of my stuff is stored on there but this looks like a great time to switch. Looks simple and beautiful! @guillaume20100
LessPass
LessPass
LessPass
LessPass
LessPass
LessPass
LessPass
LessPass
Re:amaze