Samarama is an Australian software developer, developing applications on iOS and macOS.
Why should I use a password manager?
Some articles on password managers:
Dangers of auto-fill in web browsers
SamuraiSafe doesn't use autofill of web pages with the web browser – but many password managers do –
and there are risks in doing so:
Security and Privacy often incur a tradeoff with convenience. Solutions are often complex and may not be correct or complete.
My view is keep things simple. See also Password Managers: Attacks and Defences
The SamuraiSafe Design Philosophy is minimalist –
simple and secure, with your private data fully under your control.
Password History and Safe Format Upgrades (iOS and macOS)
SamuraiSafe now supports password history (retaining previously saved passwords).
In order to use the Password History feature, each password safe requires a file format upgrade.
It is important not to enable this option until all your devices on which you use SamuraiSafe are updated.
for details on migration.
SamuraiSafe for macOS CSV Migration tool
If you wish to migrate to SamuraiSafe and your old data is in CSV format (or in an Excel file), a new tool may assist.
for more details.
Password Security News
Should you be concerned about a password manager that uploads passwords to its server?
Recovering the Master Password from a Locked Password Manager
Diceware passwords now need six random words to thwart hackers
Why you still can’t trust password strength meters
The Emperor’s New Password Manager: Security Analysis of Web-based Password Managers
A security analysis of five popular web-based password managers.
Unlike “local” password managers, web-based password managers run in the browser. The authors identify four key security concerns for web-based password managers and, for each, identify representative vulnerabilities through case studies. The attacks are severe: in four out of the five password managers studied, an attacker can learn a user’s credentials for arbitrary websites.
Password Managers: Attacks and Defences
“Secure Password Managers” and “Military-Grade Encryption” on Smartphones: Oh, Really?
SamuraiSafe Encryption Algorithms
Should you trust SamuraiSafe? The core encryption algorithm used in SamuraiSafe is published on github
However, as Belenko and Sklyarov (above) point out, you should always also set a device password, and encrypt your device backups.
Android vs Apple iOS Security Showdown