Comment on "Anon" has problems with cybersecurity [Mod approved non-greentext]

RecluseRamble@lemmy.dbzer0.com ⁨4⁩ ⁨months⁩ ago

• Martineski@lemmy.dbzer0.com ⁨4⁩ ⁨months⁩ ago

  proceeds to generate password for each service and forget the master password

  Image

  source

  • SkaveRat@discuss.tchncs.de ⁨4⁩ ⁨months⁩ ago

    just use a password manager for the password manager password

    source

    • Martineski@lemmy.dbzer0.com ⁨4⁩ ⁨months⁩ ago

      Image

      source
    • ichbinjasokreativ@lemmy.world ⁨4⁩ ⁨months⁩ ago

      Or use a hardware key to unlock it. And then loose that hardware key. Does keepassxc support fingerprints yet?

      source
  • RecluseRamble@lemmy.dbzer0.com ⁨4⁩ ⁨months⁩ ago

    Write it down somewhere. Just do it by hand.

    source

    • Zachariah@lemmy.world ⁨4⁩ ⁨months⁩ ago

      Yes, and the master should be a paraphrase not a password.

      source

      • RecluseRamble@lemmy.dbzer0.com ⁨4⁩ ⁨months⁩ ago

        That’s just recommended to emphasize length. If your password is as long as a passphrase it’s likely more secure (harder to remember though).

        source

        • -> View More Comments
    • XTL@sopuli.xyz ⁨4⁩ ⁨months⁩ ago

      Also, you don’t need to write it down correctly, if you remember what’s the missing or different or fake bit. And you can write down a few decoy ones next to it. Or have it in two different places. Lots of room for obfuscation along with some good old fashioned physical security on where you store the note. And the backup note off-site, if you’re that kind of person.

      Hell, just make some extra decoy ones just for fun and practice.

      source
  • lurch@sh.itjust.works ⁨4⁩ ⁨months⁩ ago

    just make the password a little story you can remember, e,g. “Carl+Lenny:go2a bar&spend$$$”

    source

    • MeDuViNoX@sh.itjust.works ⁨4⁩ ⁨months⁩ ago

      Hell naw, my last password was: Xé7&//sgn385d$@+îñccv72RtY¾ff°¥∆§

      source
  • BubbleMonkey@slrpnk.net ⁨4⁩ ⁨months⁩ ago

    My strategy for this is to have a second password manager available on a couple old devices, accessed with biometrics (fingerprint in this case), and only the master password saved within it.

    I considered saving it within the main manager itself, since I have devices where I can use biometrics rather than password, but that feels like a bad idea.

    Has definitely been a life saver

    source
  • JackbyDev@programming.dev ⁨4⁩ ⁨months⁩ ago

    Print out your recovery kit or master password and put it with your other documents (like birth certificate).

    source