Is it safe to store sensitive passwords like servers root on chrome?

Hell no. It stores everything in plain text. Use a password manager (or Firefox, it lets you have a master password to encrypt everything).
Disclaimer: I haven't personally verified that they're stored in plain text, that's just what I heard.

I use lastpass. They even have a mobile app the works for other apps. I've rest all my passwords to random 20 char and my master to 40 char

If something is critical or important then don't save it on chrome, it's gonna be in plaintext and that's shit

I'm going to say no... Browsers are just not designed with heavy security around storing passwords, so I wouldn't trust them to keep important things like that safe. Best to get KeePass, Dashlane, LastPass, etc. Something that's sole purpose is to safeguard passwords and other secrets.

@ScribeOfGoD
Seen the 2 exploits for lastpass?
Honestly, I trust more on a password manager not integrated with the browser. Bugs happen.

@nbamaral no, I haven't. Links?

@ScribeOfGoD
More a POC than a real exploit in the wild
https://theregister.co.uk/2017/03/...

Use keeweb dude

No. A big no no. Abort the mission. They aren't safe at all.

@ScribeOfGoD
https://palant.de/2017/03/...
https://labs.detectify.com/2016/07/...
https://hackread.com/lastpass-hacke...

@ScribeOfGoD Personally use Encryptr. But just use what suits you, of course :)

@linuxxx never heard of it before. Does it have features like lastpass?

+1 for KeePass. I still see professionals using big text files for that though... If you can, scan your desktops for that.

Best solution I know is to have onpremise standard solution that's connected with AD or other users directory you use so everybody can use it and share passwords per project for example.

@linuxxx +1 for Encryptr.

@ScribeOfGoD You can store passwords, credit cards, or just text; it encrypts/decrypts locally using your master password and sends the encrypted data to Encryptr servers for cloud storage so it's easy to keep in sync between devices.

Plus it's free and open source. I use it all the time.

Oh and it generates strong passwords. It's funny, if someone put a gun to my head and demanded my Google password, I could honestly say "I don't know it."

No. Plain and simple no.

I use 1password. Not sure if it is good or not...

@ScribeOfGoD Partly. It is literally just a password manager, no fancy addons etc. I love it though

@SirWindfield Also pretty bad as for security as far as I know

@linuxxx :(

@SirWindfield Seriously there used to be a lot of links about this on Google but they're gone :(. But oh well, as long as a password manager is closed source, I'm no way in hell going to use it, especially not for my passwords. that's basic security imo. 😃

Encryptr looks nice

@tinybyte I love it tbh! It's simple and looks well enough. If you want to check their security, just look at the source code!

@linuxxx closed source doesnt imply insecurity by default, just saying... Open source doesn't make things secure by default too...

@SirWindfield True. But, I find it a problem that closed source software can't be checked for backdoors. In general, fair enough but in cases with highly sensitive data, rather use open software imo. Just my personal opinion though 😀

@linuxxx by spideroak?

@SirWindfield Encryptr you mean?

@linuxxx ye

@SirWindfield Yup by spideroak indeed 😄

@linuxxx never new that 1password was insecure lol. But I didn't use it for cloud synching, just local pw..

@SirWindfield Thats alright haha. Not saying you have to or something but I always search for some open source applications when I'm going to work with highly private data 😃

@linuxxx looks like they abounded the project..

@linuxxx
Last comet on their github account is from July 2016!?

@tinybyte @SirWindfield Damn didn't see that. It still works at least :/

@tinybyte ye, that's the thing. Apps like password managers need to be maintened at regular intervals. There was no commit on any branch since then. Looks like they silently abounded it. Not even any activity in the issue tracker too...

I suggest you to remember the password. Easy than everything!😜😜

Wow after all this, best solution is to memorize passwords :-(

@SirWindfield maybe if the encryption they use suddenly becomes obsolete.

@spongessuck that's no what I meant. They also have backend used to sync your pw that needs to be maintened.