Logic of mobile password manager?

[THAIPHUKET]

Does a mobile password manager not make the mobile particularly vulnerable?

1. Hacker looks on your mobile only for a password manager.

There is a limited number of them.

2. Hacks into password of the manager and the whole world is accessible.

Much less effort than breaking into individual websites.

 

How do you handle this security concern?

 

Sent from my Pixel using Thailand Forum - Thaivisa mobile app

 

 

[HampiK]

But this mean the hacker has to steal your mobile first. I am not a fan of password tools, but I guess the good ones have some security like erasing the passwords if you enter the code 3 times.. or use 1-2 seconds to show if the password is correct or not... so a hacker would use a longtime to hack them. And which hacker involve that much time for a "normal" person.

If you a famous one, then it looks different.

[2008bangkok]

Hacker needs to steal phone

Hacker needs to guess password for phone

Hacker needs to guess password for mobile password manager

 

User loses phone and remotely wipes phone - problem solved.

[THAIPHUKET]

Why steal? I bet one can target remotely only mobiles with a PWManager application installed. Then hack it.

Sent from my Pixel using Thailand Forum - Thaivisa mobile app

[2008bangkok]

Why steal? I bet one can target remotely only mobiles with a PWManager application installed. Then hack it.

Sent from my Pixel using Thailand Forum - Thaivisa mobile app

Hmmmm, I don't think that's going to happen.

So they the phone remotely and then steal what? They still need password to open appas all the data is encrypted.

[KhunBENQ]

4 hours ago, THAIPHUKET said:

2. Hacks into password of the manager and the whole world is accessible.

Yes. But that ridicules all password managers in a single sentence.

And what is special about mobile PW manager?

 

" Hacks into password"!

"If." said the Spartans

My PW is 16 characters long and follows basic rules.

Good luck hacking.

 

You overlook the real danger: malware/Trojan creeping to your PC/laptop/mobile listening to your (virtual)keyboard input.

Like the hacker spying over your shoulder.

 

Edited March 5, 2018 by KhunBENQ

[RichCor]

My shared password vault is 2FA'd -- so while one key is fixed, the other is constantly rotating.

They'd have to hack and intercept multiple vectors to gain access.

 

But, yea, in a previous life I did computer forensics and really like it when people used short simple keys to protect all their stored passwords in a local password manager. Made my case work a lot easier having all the accounts and paswords stored in one place.