Re: lastpass

[Robert <http://dummy.us.eu.org/robert>]

 > From: Flora <http://www..family/~flora>
 > Date: Sun, 17 Jun 2018 16:54:16 -0400
 >
 > On Sun, Jun 17, 2018 at 4:45 PM Robert <http://dummy.us.eu.org/robert> wrote:
 > >  > Yes, LastPass has a password generator. I use another random
 > >  > password generator, though - web-based.
 > >
 > > How do you do that?
 > 
 >   Passwordsgenerator.net

It says here that this is unsafe:

 https://security.stackexchange.com/questions/17940/is-it-safe-to-generate-passwords-online

Not sure of veracity of the answer, however.

Why don't use LastPass's generator?  Seems like, assuming you have a good
random source, generating on your device of choice is safer.  Just my
intuition, 'tho.

 > >  > I do keep all my software up to
 > >  > date.
 > >  >
 > >  > I don't use LastPass for my bank. Instead, I have a cyber token, an
 > >  > external hardware device for my 2-Factor Authentication.
 > >
 > > You do have a special circumstance, and a special bank (right?).
 > 
 > Iâ??m sure your bank probably provides the same service.  I imagine any
 > large bank would offer this.

We have credit unions.  I just looked and I don't see such a service
offered.

 > > I would add that you should never use the same email address, either, but
 > > that is much more difficult.  Gmail is fairly convenient:
 > >
 > > https://gmail.googleblog.com/2008/03/2-hidden-ways-to-get-more-from-your.html
 > 
 >  Hmm... Something to look into .

My co-worker uses this feature in gmail.  (I too use a unique email
address for every service, but not google, obviously.)

 > > LastPass is pretty secure, but, again, I don't like depending upon or
 > > using cloud services.
 > 
 >  Ahh, but the convenience .

It could be our downfall.