search

ipfs / notes

IPFS Collaborative Notebook for Research
MIT License
402 stars 30 forks source link

Login/Password manager (LastPass sucks) #258

Open jbshirk opened 7 years ago

jbshirk commented 7 years ago

I am forced to use LastPass at work, where the use case is that workers do not know their passwords (and cannot change them) and they are stored/shared centrally. It's terrible, and it's a single point of failure because LP is unreliable and sharing from top down often does not work. Plus, if LP goes down, you know it will be a nightmare for companies depending on it...

I was thinking that at least in simple cases where a secure login can be done via url parameters stored in a list in IPFS, and in a more advanced app on IPFS, login/PW pairs can be shared securely. Anyone working on something like this?

Stebalien commented 7 years ago

Actually, this is a perfect use-case for IPLD. Unfortunately, we really need access control/encryption baked into the protocol to make it secure.

jemacom commented 6 years ago

@Stebalien I am nooby here but I think we can encrypt contents before using the IPFS protocol. That way we can use the actual version.

Stebalien commented 6 years ago

@jemacom you can but then you'd need a good key management solution. Personally, I'd prefer to avoid giving people access to even the encrypted data (access control).