[POLL] Do you use a Password Manager?

[r2724r16]

This should be pretty self explanatory:

- If you use a password manager, then answer "YES"

- If you don't use a password manager, then answer "NO"

 

I made this thread because I've been seriously thinking of setting up a password manager recently, but I'm not sure if it's a great idea (because of security concerns).

 

Thanks!

[KE2012]

Nope. Those things are begging for trouble if you asked me. 

[jiyeon]

There is no way someone is going to convince me that writing my passwords to some third party 'password manager' is a good thing. That data is going to be compromised at some point, so I'd rather not risk it.

 

My brain is my own password manager.

[slashqpbyte]

The best thing you can do is write your passwords down in a ledger, then store them in a safe bolted to the ground. Or keep them on an encrypted flashdrive, in a safe, bolted to the ground.

[Teddy07]

Never even thought about it

[Jimkirk363]

Yes i use LastPass and have done for years now.

[slashqpbyte]

here is a better question, how many people use password generators?

[Razor Blade]

1 minute ago, slashqpbyte said:

here is a better question, how many people use password generators?

That's what I do...or use a simple encryption method to make a password out of random words.

[r2724r16]

1 minute ago, slashqpbyte said:

here is a better question, how many people use password generators?

At the moment, I'm less concerned with the quality of people's passwords, and more with whether or not people use password managers.

[jiyeon]

5 minutes ago, slashqpbyte said:

The best thing you can do is write your passwords down in a ledger, then store them in a safe bolted to the ground. Or keep them on an encrypted flashdrive, in a safe, bolted to the ground.

Or pull a Mission Imposible Rogue Nation and have all your passwords stored in your head.

 

 

[slashqpbyte]

4 minutes ago, Geography said:

At the moment, I'm less concerned with the quality of people's passwords, and more with whether or not people use password managers.

Right, but one sort of determines the other, I can't remember a random 16 char string comprised of alphanumeric characters, not to mention special char's. I use a password manager.

[slashqpbyte]

5 minutes ago, seoz said:

Or pull a Mission Imposible Rogue Nation and have all your passwords stored in your head.

 

 

I could do that with my 128-bit WEP key as a kid, true story

[Thunderzzu]

For those saying using third party password managers is a bad thing - there's a bunch of open source password managers that you can build yourself. Not all of them are cloud. I'm using a program to encode and decode a encrypted file that contains my passwords and i can store that file wherever i want, or keep it local. As far as I'm concerned, there isn't a solid reason for not using a password manager if you're a techie and are willing to spend a day searching for one that suits you and inspecting code.

[Lurick]

I have over 250 sites in my vault, some of which I barely visit but still do from time to time, anyone who thinks I'm going to use the same password across multiple sites or remember some long ass mnemonic or random password for every site is out of their damn mind. I have a hard time remembering all my various usernames let alone trying to remember ALL the passwords.

[jiyeon]

2 minutes ago, Thunderzzu said:

For those saying using third party password managers is a bad thing - there's a bunch of open source password managers that you can build yourself. Not all of them are cloud. I'm using a program to encode and decode a encrypted file that contains my password and i can store that file wherever i want, or keep it local. As far as I'm concerned, there isn't a solid reason for not using a password manager if you're a techie and are willing to spend a day searching for one that suits you and inspecting code.

I had the idea to create an encrypted text document on my USB drive which would also be encrypted upon insertion of a USB port, but never found the need to due to the amount of passwords that I need to memorise on a daily basis.

[DrMacintosh]

yep, iCloud Keychain 

[mxk]

writing it down or hiding a windows text file is my go to

[keskparane]

Remember to answer yes if you use auto-fill, cookies, etc, in your browser.

[Crunchy Dragon]

If my brain counts as a password manager, then yes.

[Clockworkz]

Yes, Lastpass.

[r2724r16]

15 minutes ago, keskparane said:

Remember to answer yes if you use auto-fill, cookies, etc, in your browser.

I don't count that as a password manager, because it works differently from a "normal" password manager.

[Tamesh16]

58 minutes ago, KE2012 said:

Nope. Those things are begging for trouble if you asked me. 

yeah i have really wanted one, but always been resistant, and ever since last pass got leaks i dont really think i will 

however that being said, i do save some in chrome 

[TetraSky]

Yes, I use Keepass, with secure desktop, automatic clear clipboard after 15 seconds and close the program if it idles for more than a minute.(along with a few other extra security measures, no memory sifting software will find a password if the PW manager is closed)

 

After having to change my passwords a couple times when a service I was using got hacked, I decided to take an hour of my time to set up Keepass and learn how to use it. Then went through every websites, services and applications that required a login and changed them all to unique randomized 35+ digit passwords. (Some exceptions for services that think it's ok to limit the length of a password to 8~16 digits... ridiculous)

 

Now I just need to remember two passwords. The one for the database and the one for my email's password(as complicated as I could make it while still remembering it).

That way, if the database goes to shit somehow (I create weekly backups of it and manually save it to a usb flash drive to carry on me, so it's highly unlikely...), I can recover pretty much everything with just the email.

 

With Keepass, your passwords are as secure as your PC is secure. If you're super paranoid, you could easily just load your passwords on a second device, like an old phone that isn't connected to the internet at all and manually type your passwords on your PC by looking at the password on your phone's screen. Would be kind of like using a pen and paper at that point... just safer because it can be "locked" away.

[divito]

I let Google auto-fill. Considered using Last Pass but meh. 

[MrFixitBlankFace]

Don't need one.

Either my passwords are extremely long and memorable or extremely short and memorable.