Comment

Comment on Are password managers secure to use?

I think they can be much more secure than:

remembering your ( probably weak ) passwords
writing passwords on paper, which is slow, you can lose paper, break it, or someone can steal it
storing passwords in unencrypted text file

I use KeepassXC, which is offline, encrypted password manager. Every password is stored in one file, which to access, I must enter the one password I do remember. I recommend having backups of this file.

It has password generator included, so all my password are long, strong and unique. It also can auto fill password/login which saves time.

To increase security of your account even further you should also use multiple factor authentication, for example app which generates one time codes on your phone offline. It will protect you, even if your password gets leaked, or cracked.

source

Sort:hotnew top

someguy3@lemmy.world ⁨1⁩ ⁨day⁩ ago
If you write it in paper, include the same short word on the end of all your passwords that you don’t write down. Password is Hunter2duck but you only write down Hunter2.

source
- over_clox@lemmy.world ⁨1⁩ ⁨day⁩ ago
  All I see is *******
  
  source
  - felbane@lemmy.world ⁨1⁩ ⁨day⁩ ago
    I just see *******duck
    
    source
- garbagebagel@lemmy.world ⁨14⁩ ⁨hours⁩ ago
  I write my passwords on paper in code, like my dad taught me to do.
  
  However, just a personal anectdote, my uncle passed suddenly and he had written all his passwords (not in code) on a spreadsheet with each account, which he then printed. I promise you, this single piece of paper was one of the most helpful things I could’ve asked for in sorting out all of his assets. It was a genuine lifesaver. Now I often think that maybe I should be sharing my password with an S.O. or someone else close to me just to make their life easier if I were to die tomorrow.
  
  source
  - someguy3@lemmy.world ⁨4⁩ ⁨hours⁩ ago
    See you can tell your family the “duck” part. Then anyone that steals the paper still can’t do it.
    
    source
- PlexSheep@infosec.pub ⁨23⁩ ⁨hours⁩ ago
  This is just a hack. If you use encryption to store passwords, that becomes just a nuisance.
  
  source
  - someguy3@lemmy.world ⁨23⁩ ⁨hours⁩ ago
    Unfortunately I see headlines every now and then that whatever password manager was compromised.
    
    source
    PlexSheep@infosec.pub ⁨9⁩ ⁨hours⁩ ago
    I mean… Can’t happen if you keep your stuff encrypted like with KeePassXC. Even if someone gets my password database, it’s useless for them since they don’t know how to decrypt it. That’s why I don’t use some online service, though using one of the online services is certainly better than reusing a weak remembered password.
    
    source
    xylol@leminal.space ⁨22⁩ ⁨hours⁩ ago
    Hopefully passwords are encrypted so the hackers get useless data
    
    source