Your password manager is the most sensitive piece of software in your tech stack. It holds everything - your email, banking, work credentials, health records, crypto, and more. Here’s how 12 of the…

  • FiniteBanjo@feddit.online
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    7
    ·
    edit-2
    13 days ago

    I just remember my password. Nobody is going to spend 2.8 Million Years of compute time to hack into my social media account, and if they try that shit with my bank it would just be a matter of if I can transfer money somewhere else while they’re still bouncing around new IPs as they get blocked.

    The only way I could be sufficiently pwned is if they had keyloggers and recording malware on my machines but at that point I really doubt they wouldnt also have access to the Password Managers.

    Tips for a strong password:

    • You can use a word as the base, two words is better, but add 3 to 5 random letters
    • Add 2 symbols
    • Add 3 Numbers
    • No pet names, birthdays, maiden names, etc
    • Use 2FA but NOT SMS

    Example: ChocolateSBHRainforest!&127

    Thats actually my American State Bank Password /joke

    EDIT:

    As others have mentioned, you should periodically change your passwords, and you should be using different passwords for different services especially unique ones for sites with your real personal or financial details.

    You should also be populating fake personal details on every other site including name, address, DOB, etc. I find particular joy in selecting church addresses and sometimes even home phone numbers as most sites aren’t capable of verifying that. If you need to remember a fake birthday just use Jan 1 1970.

    • hendrik@palaver.p3x.de
      link
      fedilink
      English
      arrow-up
      10
      ·
      edit-2
      13 days ago

      You remember your master password? Or your singular password you use for all the services and once any internet service gets hashing and salting wrong, or gets compromised like the two or so big internet platform that get breached every year, you want to experience that tingly feeling that all of your digital life could be accessed by some hackers?

      Edit: In case it’s the latter and you don’t change your password every week: Try https://haveibeenpwned.com/ enter your eMail address and if it comes up with anything, up your security. At least for the important stuff. It’s worth it.

      • FiniteBanjo@feddit.online
        link
        fedilink
        English
        arrow-up
        1
        arrow-down
        1
        ·
        13 days ago

        You should be using multiple passwords and you should be changing them periodically multiple times per years, yes. How many and how often will likely depend on the memorization skills of the individual.

        • hendrik@palaver.p3x.de
          link
          fedilink
          English
          arrow-up
          1
          arrow-down
          1
          ·
          13 days ago

          Or on their cleverness. There’s tools to do that job, no effort or memorization needed. And I’d say changing them is further down the list. Makes sense to do it proactively. But it’s the least important thing to do.

          • FiniteBanjo@feddit.online
            link
            fedilink
            English
            arrow-up
            2
            ·
            13 days ago

            Sure, you could also use a nailgun instead of a hammer. That doesn’t mean you need to nor does it invalidate a hammer.

            • hendrik@palaver.p3x.de
              link
              fedilink
              English
              arrow-up
              2
              ·
              13 days ago

              Yeah, though if you re-do your roof, you kinda want to use the nailgun, or your wrist will be sore after two days. Or you’re skipping half the nails to make it work and the next big storm will take away your home.

              • FiniteBanjo@feddit.online
                link
                fedilink
                English
                arrow-up
                1
                ·
                13 days ago

                Skill Issue, I’ve done plenty of roofing jobs. TBH I think the hammer makes more sense there because I find it easier to align the hammer and nail while keeping your body held to the incline.

                I’m not going to kill my wrist by typing in my password, either.

                • hendrik@palaver.p3x.de
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  ·
                  edit-2
                  13 days ago

                  I’m not going to kill my wrist by typing in my password, either.

                  I think the issue will be, you’ll likely be using too few passwords because you don’t really use any tool designed for the job. At least your suggestion reads a bit to me like you’re suggesting one nail will hold the roof if it’s a really good one. And that’s doable with bare hands.

                  • FiniteBanjo@feddit.online
                    link
                    fedilink
                    English
                    arrow-up
                    1
                    ·
                    13 days ago

                    And? What next?

                    The major counter-argument I’ve heard is that passwords can get exposed in leaks, but even if you only have a few passwords the odds of somebody hacking a social media account and then that same password working for your bank is slim to none if you’ve been smart about it AND

                    as I mentioned

                    use 2FA but not SMS. Something that really grinds my gears is when services don’t allow you to disable certain 2FA options such as email or SMS, those services are the ones that are actually vulnerable, compared to a non-google auth code generator.

                    TBH I trust password managers less than I trust these institutions and I don’t trust these institutions AT ALL. If ever somebody finds a vulnerability in the password manages you lose EVERYTHING.

    • HubertManne@piefed.social
      link
      fedilink
      English
      arrow-up
      1
      ·
      13 days ago

      meh. I use an online one for unimportant stuff and an offline one for important stuff. I remember my passwords for the managers.