[POLL] Do you use a Password Manager?

[dfsdfgfkjsefoiqzemnd]

Keep in mind that a password manager is a single point of failure.  If anyone ever gets in to yours, they basically have full access to everything. 

If you use one, at least put 2FA on every account whose password you store in there. 

 

I use different passwords for almost all of my accounts (not that I have many of those, I'm a digital minimalist) and I can memorize basically all of them.  I do keep a full list of them in an encrypted file on an offline-only machine, just in case I forget one. 

I guess that machine is also a single point of failure, but then again you'd need physical access and need to brute-force a long and complicated passphrase in order to get access to a file that's basically random symbols to anyone who doesn't know exactly how I designed it.

[dizmo]

The way I see it, all they need to do is break one password; then they have them all. So. It seems a little smarter not to use it at all.

[keskparane]

34 minutes ago, Geography said:

I don't count that as a password manager, because it works differently from a "normal" password manager.

How so? What is the difference?

[r2724r16]

1 minute ago, keskparane said:

How so? What is the difference?

Password managers generate random passwords for you, while autofill just saves your existing passwords.

[keskparane]

1 minute ago, Geography said:

Password managers generate random passwords for you, while autofill just saves your existing passwords.

Google generates passwords for me

[r2724r16]

Just now, keskparane said:

Google generates passwords for me

Okay.

[keskparane]

8 minutes ago, Geography said:

Okay.

So to add Google (chrome) generates and stores my passwords. Reason being there is no way I want to copy-paste every password I have into every site I access so I'm going to use autofill. Since autofill stores the passwords anyway there is no point in storing them anywhere else. So I may as well just hope that google keeps my data safe. I get to see if anyone tries to access my data from a different machine so essentially I have a watchdog on my master list. I don't have to worry about backups etc.

 

Things like bank passwords however I just remember and never ever record anywhere.

[Mr Technician]

I’m strongly considering switching to a password manager along with my current usage of Authy.

[Mihle]

No.

All my passwords is different and the same time I don't write any of them down. Some parts of my passwords is the same, but other parts vary depending on the site, in a memorable way. They are also quite long.

 

Hope I haven't said too much.

 

I do ofc use 2 factor all places where it's possible, you should too.

[aezakmi]

you guys don't have brains?

[r2724r16]

Just now, aezakmi said:

you guys don't have brains?

No

[keskparane]

2 minutes ago, aezakmi said:

you guys don't have brains?

I also play with matches, run with knives, and step on cracks.

[soldier_ph]

Yes, Last Pass with 2FA

 

 

[DesolationGod]

I use last pass on firefox, mostly started as a way to sync passwords from chrome as firefox's built in feature didnt work.

[Princess Twilight Sparkle]

No way, if anything I'll write it down partially or as a hint for myself.

[veryslothysloth]

I use a password manager (KeePass) that has the database just on my pc instead of online. The database is encrypted and locked with a password and a keyfile and I sync it with my phone over a Sync software that I'm also hosting myself on a raspberry (along with some other services). That way I have randomly created very secure passwords and a Database where they are stored that noone can access.

 

Edit: plus I use 2FA where possible

[TechyBen]

Yes. It's called notepad...

[Rohith_Kumar_Sp]

for the longest time i had managed with writing it down on a notepad, only the notepad i had it on a hard drive all of a sudden got corrupted, for about 2 weeks i had no idea what to do, i tried to read the drive again after 2 weeks and after 3 hours of inserting the drive it finally spin and spin and got detected, copied that file first thing and created lastpass account. 

[JoostinOnline]

Why do that when I can just use a Post It note on the monitor?

[duncannah]

I only use Lastpass because it's free, its Android app is rubbish though unfortunately

[BobVonBob]

Bitwarden for me, free multi-device sync and open source were my only requirements for a password manager and it meets both.

[NineEyeRon]

I came up with a cipher that uses elements of the web page that all pages have to reference against a lookup I created. The password parts generated from those elements of the page or service I am using combine to make the password.

 

All I have to do is remember the options and how to select the right one. Each site then has 3-5 possible combinations so I can usually get it before the 5 goes are up.

 

I also use a password manager for less important sites.

 

I have found sites like Dinopass useful for my wife who never remembers passwords. Dinopass passwords are super simple to remember while being fairly decent.

[TechyBen]

3 hours ago, Rohith_Kumar_Sp said:

for the longest time i had managed with writing it down on a notepad, only the notepad i had it on a hard drive all of a sudden got corrupted, for about 2 weeks i had no idea what to do, i tried to read the drive again after 2 weeks and after 3 hours of inserting the drive it finally spin and spin and got detected, copied that file first thing and created lastpass account. 

My notepad is also stored on a corrupted broken HDD. Why I still keep that HD on my desk, and why I put my paper notepad there I don't know... but never had trouble with "file" access off it. 

[Giganthrax]

Nah. I have like 5 or 6 different passwords that are essentially made up words combined with numbers, and I use those for everything.

 

Also, google auto-fill for the win. 

[Phentos]

Lastpass here. Everything related to it is also secured with multifactor, including the registered email. I have about 12 passwords I use actively, and keeping track of which one I use for whichever website would be very annoying without it.

 

Just wish the Android app was better.