Anthony Collette :donor: / Loistava<p>Which Password Manager Is Better? <br>Standalone or Built-In?</p><p>Tavis Ormandy Sounds Off</p><p>Should ordinary folks use a separate, standalone Password Manager, or the Password Manager built into their browser?</p><p>Tavis Ormandy is an Information Security Engineer from England currently employed by Google as a member of their Project Zero team.</p><p>After discussing various technical problems with password managers, and after downplaying the need for "nuance," Tavis says:</p><p>"If you want to use an online password manager, I would recommend using the one already built into your browser. They provide the same functionality, and can sidestep these fundamental problems with extensions.</p><p>I use Chrome, but the other major browsers like Edge or Firefox are fine too. They can isolate their trusted UI (user interface) from websites, they don’t break the sandbox security model, they have world-class security teams, and they couldn’t be easier to use."</p><p>Tavis also recommends writing down and securely storing passwords.</p><p>Thinking about what would work best for most people, where do you think this advice lands?</p><p>Good idea, bad idea, or somewhere in between?</p><p><a href="https://infosec.exchange/tags/Infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Infosec</span></a><br><a href="https://infosec.exchange/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Cybersecurity</span></a><br><a href="https://infosec.exchange/tags/BeCyberSmart" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>BeCyberSmart</span></a><br><a href="https://infosec.exchange/tags/MoreThanAPassword" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>MoreThanAPassword</span></a><br><a href="https://infosec.exchange/tags/InfosecTraining" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>InfosecTraining</span></a><br><a href="https://infosec.exchange/tags/Passwords" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Passwords</span></a><br><a href="https://infosec.exchange/tags/PasswordManagers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>PasswordManagers</span></a></p><p><a href="https://lock.cmpxchg8b.com/passmgrs.html" rel="nofollow noopener noreferrer" target="_blank"><span class="invisible">https://</span><span class="ellipsis">lock.cmpxchg8b.com/passmgrs.ht</span><span class="invisible">ml</span></a></p>