Shoutout to my IT buddy who laughed at my password manager choice

My friend Dave, who works in network security, told me last year that using a browser's built-in password manager was fine for most people. I argued with him saying dedicated apps like Bitwarden were way safer. Well, three weeks ago my Chrome sync got compromised after I clicked a bad link, and all my saved passwords were exposed. Dave was right that a separate manager with local encryption would have protected me better. Anyone else ever been humbled by a friend's advice they dismissed?

3 comments

3 Comments

olivers281mo ago

Wait, your whole Chrome sync got popped just from clicking one bad link? That's wild, I thought Google had better sandboxing than that. So Dave was basically right about using a dedicated manager for the important stuff then?

the_riley1mo agoMost Upvoted

Google's sandboxing works fine until you give the site permission to do stuff without reading what you're agreeing to. That's how most of these sync hacks happen, not through some exploit.

thompson.robin1mo ago

Yeah "reading what you're agreeing to" is the key, I've seen permissions that look innocent but let sites swipe your entire history lol.