Risk from accidental or malicious file corruption is mitigated by having copies of the backups that can be restored on multiple devices… So, risk to password security from device theft and hardware breakage is mitigated by encryption and having copies on other devices (hope they don’t all get stolen or broken simultaneously). (Master key needs to be handled separately.) So, this means synchronizing the encrypted storage between devices.Īgainst file corruption (both accidental and ransomware) it’d be helpful if the sync tool would automatically also store backups, but this should be possible with any backup tool that can read the files that the encrypted storage consists of. The local storage needs to be encrypted at a minimum, to help against theft and such. Stored locally for offline use is a hard requirement for some things (passwords to equipment installed in locations with not ‘net access, etc) and makes it easier to do backups too. Now, there’s more than one way to mitigate these issues…įirst, I prefer to be able to access the stored passwords from multiple devices.

I believe that this whole discussion started on the assumption that one’s computer, in final analysis, might not be the safest place to keep one’s passwords. Agree about it being easy to use passwords using a password manager now, about these also being kept in a secure place, well…

Privazer z