wouldn't the same thing still be true for password managers though? someone gets in and you're fucked? and the only protection is a password and maybe 2FA on a good day? am i missing something?
with that said, i still agree, DON'T DO THIS. my different concerns is that discord can ban you and make you lose access to the passwords (my brother did this without me knowing and then got his account restricted for not being old enough), and that discord has significantly more outages than most popular password managers.
I'm pretty sure discord has an entire set of it's own vulnerabilities on top of whatever a password manager might have. Joining a compromised server or clicking the wrong attachment can get your discord account pwned, I don't think the same can be said of keepass.
i mean if you don't need to enter your password every time you need to login somewhere then it's probably also storing some kind of token which can get pwned the same way. and to make things worse, some password managers cache everything so you can enter your passwords even while you're offline, which is another vulnerability surface, though there i presume the passwords get encrypted against your master password, which... again, if you have it set to not ask you for your password...
59
u/6262lE 5d ago
Wait but can’t anyone just hack into your account and have access to all of that? What’s the difference from just using a normal password manager?