logoalt Hacker News

sally_glance • today at 7:22 AM • 1 reply • view on HN

How would that help when your workstation is compromised? They can just steal your authentication the moment you log in through the password manager


Replies

thecopy • today at 8:07 AM

It does help in that the secrets are not in plain-text, readable for any script you run. With 1Password, a process asks for the password and it gets transferred not through the filesystem but through IPC. 1Password shows a dialog: "Do you want iTerm to get your SSH key ABC123?"

In my thinking, this is more secure than plaintext in filesystem

➕ show 1 reply