logoalt Hacker News

john_strinlai • today at 4:14 PM • 1 reply • view on HN

>which objectively do exactly that

password managers do not do that. open up your password manager, press "copy" on the password, and then paste it into a random website. it will paste it.

(i think 1password just recently enabled an option that will warn you if the website is different than the one it has, but it still lets you paste it)


Replies

Someone1234 • today at 4:15 PM

So they do, in fact, do that and you have a workaround? They won't autofill on a phishing site, thus the copy/paste bypass.

It is a pretty big red-flag.

➕ show 2 replies