0
1
I'm considering downloading a password manager so that I don't keep forgetting my passwords. The problem is, how do I know that the password manager itself is both hackproof and trustworthy, i.e. no back doors built in by unscrupulous developers? Can you recommend any such password manager software?
Shaul Behr
Posted 2014-08-27T11:30:06.270
Reputation: 1 437
1
Keepass is open source and therefore everyone with needed skills can "audit" it and proove it (relatively) safe (relatively because never say never).
That's what i personally use, it's very efficient and has plenty of plugins for browsers, backup, sync, etc.
IMHO, you can trust most of opensource well known software like Keepass. If you want to trust a 3rd party company like LastPass ou 1password, your passwords should be salted with a key on the client and it should be fine, but once again you'll never know...
pataluc
Posted 2014-08-27T11:30:06.270
Reputation: 580
1
When it comes down to it, nothing online is completely safe. Look at recent news about leaked user information and you'll understand big or small, someone somewhere will find a loophole. I suppose it's one of those things you'll need decide if you want to take a risk on.
Dana Nickerson
Posted 2014-08-27T11:30:06.270
Reputation: 11
1This question is really broad. There are tons of open source password managers that exist. You certainly can trust those. Software recomendations are not on topic here at Superuser. So you understand there are multiple reasons i issued a downvote. Its not on topic since its asking for a software recomendation, your asking can you trust a password manager instead of should I ( even that is still a primarily opinion-based answer ), and the question is extremely broad. – Ramhound – 2014-08-27T11:39:30.617
@Ramhound, the main thrust of the question is how to know whether password manager software is trustworthy. The recommendation is peripheral. Why is the question OT? – Shaul Behr – 2014-08-27T11:57:29.127
If you want to convince yourself, you'll have to audit the entirety of the source code yourself. Simple as that. – Daniel B – 2014-08-27T12:39:14.983