Comment on The Automated Bot of Experian support phone line, refuses to let me to a real person... 🤬

• SpaceNoodle@lemmy.world ⁨4⁩ ⁨weeks⁩ ago

  I put mine on a Post-It on my monitor with my other passwords

  source

  • possiblylinux127@lemmy.zip ⁨4⁩ ⁨weeks⁩ ago

    You laugh but it is often much easier for people to understand physical security especially for older people. They can get a small notebook and then guard it.

    source

    • SpaceNoodle@lemmy.world ⁨4⁩ ⁨weeks⁩ ago

      It’s funny because it’s true.

      source
  • NaibofTabr@infosec.pub ⁨4⁩ ⁨weeks⁩ ago

    If your home threat model involves people breaking in and having physical access to your personal computer, then you have bigger problems than them getting your passwords. There’s really no reason you can’t just write them down.

    source

    • SpaceNoodle@lemmy.world ⁨4⁩ ⁨weeks⁩ ago

      Precisely. Once they reach the dungeon, they’ve already passed all the really nice stuff anyway. Besides, at this point it’s easier to just hack my accounts the old-fashioned way.

      source
• IDKWhatUsernametoPutHereLolol@lemmy.dbzer0.com ⁨4⁩ ⁨weeks⁩ ago

  I don’t have a safe to put the password in, and I’m too skeptical of my family to just have it in plaintext.

  But now I found a solution, a compromise, instead of writing the actual master password, I paid for premium so that I can set up emergency access and make my secondary account as the trusted contact, then put the username and password to this secondary user on a piece of paper in plain text and even write “Bitwarden Emergency Access” on it.

  Even if a snooping family member got it, they wouldn’t be able to access my vault, I set the timer to at least 2 weeks, and I check the emergency contacts webpage every few days to make sure the timer hasn’t started ticking. If I ever get an email, or check the page and see the emergency access request being made, I’ll know I have to confront someone.

  And meanwhile, this also protect me in case I forget the master password to the main account, or like have anmesia or something. The drawer is a prominent visible place, so even if I lose my memory, I’d probably be looking for clues and find the paper with the log in info. Then wait 2 weeks and voila!

  I love the Emergency Access feature, what a wonderful Idea! I wish I used it the first time.

  source

  • AnarchistArtificer@slrpnk.net ⁨4⁩ ⁨weeks⁩ ago

    It sounds like you have this sorted now, but I will share my tip anyway.

    My master password was a randomly generated pass phrase of a few words, such as what you can generate with Bitwarden’s password generator set to “passphrase”

    Using an example I’ve just generated with that tool, if I had decided on a master password of “Daily-Exorcist-Nappy-Cornmeal”, then I would generate a few more passwords and write those down too. So I’d have a list that might look like this:

    ---

    snowman

    daily

    uncanny

    backer

    exorcist

    thinner

    showoff

    nappy

    cornmeal

    nifty

    ---

    (I have bolded the words belonging to the actual master password from my example above, but obviously that’s not how it’d be written down. To remember that the passphrase has the words separated by hyphens, you could draw dashed lines around the list, like a decorative border. Here, I have also written words all in lowercase, even though the password has uppercase. (Though I would advise keeping the passphrase in the correct order, as I have in this example, because it’s easy to pick out the correct four words from a list like this, but harder to remember the right order for them).

    I don’t have a safe either, but writing things down like this felt like a sufficient level of security against snooping family and the like. Though like I say, it seems like you’ve resolved this differently, so this is more for others who may stumble across this than for you.

    I agree with you that the emergency access feature is great. A couple of years ago, my best friend died and I ended up being a sort of “digital steward” of all his stuff, because I was his tech guy and he had shitty passwords that I couldn’t convince him to change. In the end, his laziness meant we got to preserve some digital mementos that would otherwise be lost (such as his favourite decks on Magic:Arena). At the time, I was using a personal system to generate and remember passwords, and I was shaken to consider how much would be lost if I died. I feel far more at ease now with the Emergency Access feature from Bitwarden Premium (I also like being able to use Bitwarden for 2FA codes). I’m sorry that you had the unfortunate experience of being locked out of your stuff, but I’m glad you were able to secure yourself such that you’re protected from that in future.

    source
  • forrgott@lemm.ee ⁨4⁩ ⁨weeks⁩ ago

    I just keep my master password written on a piece of paper tucked into my wallet.

    source

    • IDKWhatUsernametoPutHereLolol@lemmy.dbzer0.com ⁨4⁩ ⁨weeks⁩ ago

      That… seems insecure…

      I hope nobody just steal the paper and your entire digital identity.

      source