The lighter side of ADHD
Password security and password manager howto should be an essential part of education. But then again if that happened, schools would probably teach how to use some proprietary cloud-based app with built-in datamining, because lobbying. It would only be a matter of time before everyone would find out the company was storing everyone's passwords in plaintext after they all leaked.
Keep a physical, paper password notebook, and write something boring, like "recipes" on the front of it.
Or, you know, a password manager.
https://bitwarden.com/ or plenty other free (or paid) choices
Keeppass is pretty simple if you want to keep corporations out of your shit.
until you need your password on a different device
my database is synced to all my devices. I selfhost nextcloud for that but you can use whatever service you want. I used to use dropbox and manually transferred the key file so it never touched their servers.
Do yourself a favor and go to https://bitwarden.com/
Then you can generate a password so big and complex, the site or app starts begging you to stop. At that moment, you can say "ur password system is weak."
Careful with that. Sometimes a site will allow you to use some stupid long password when you sign up, but then it turns out that some other version of the site or an app for it on other platforms won't accept a password that long!
In lemmy, password length is capped to 60. Weak.
Almost, but KeepassDX is better 😎
KeePass and literally any of it's derivatives. Not just DX.
I use Keepass2Android, KeePass XC, Keepassium, and the OG KeePass.
They are all solId.
Sadly they are putting 'AI' bullshit into it now: https://bitwarden.com/blog/bitwarden-mcp-server/
Can't wait to have chatgpt post my passwords online
We're not sure what system they use, but yeah. That was our thoughts too.
Yes but it's opt in, not opt out, it's not shoved down my throat unlike most other companies.
Arghh, why is every company thinking, that AI will make them valuable...
"Let AI retrieve, generate and manage all your credentials"
Yeah a definite nope, for what reason do I use bitwarden? So that exactly this doesn't happen...
Anyway vaultwarden is what I'm using, much more performant and self-contained, compatible to bitwarden (but you need to host it, obviously)...
Let me write a fucking passphrase instead of ABCabc123! And let me use fucking ã, ñ, é, ç, etc on my passwords - Microsoft doesn't allow spaces or latin special characters
Forcing people to use upper case, lower case, number and special character is terrible for them and vastly increases password reuse. Besides, almost no one brute forces anything anymore, it's all rainbow tables and invading the database server
None of the characters in your post are special characters. It's not your fault, but I hate when tech folks call stuff like ñ a special character. That's a real character that a real language uses.
Use a password manager like keepassxc
Or Bitwarden for cloudsync
You can use keepass with cloudsync.
Just have the password file in a cloud.
Sounds like pain in the ass, I really like the auto-fill feature of Bitwarden... (or in my case vaultwarden as backend)
Bitwarden is great! However, Keepass(XC) can do autofill as well.
The only complication is keeping sure your cloud copy is up to date, or your machines are all kept in sync without conflict with something like syncthing. I actually really like the ways you can tweak KeepassXC.
password managers save my life very hard
Password manager
- attribution: https://xkcd.com/936/
So, are we just going to pretend dictionary attacks don’t exist?
It would seem so, yes.
Evidence: xkcd is never wrong. :-P
(Although I have always wondered about that aspect yes... perhaps an attack has to switch between trying random letters and random words, which may limit its effectiveness, and still keep the number of words high? What if we swapped out letters like c0rr3ct? - b/c obviously hackers have never heard of 1337 5p33ch before. Yeah I really have not looked this one up, hence default to the joke answer above. irl I use the FOSS KeePass and a large string of random crap... but that is nowhere near as funny to say as correct horse battery staple:-D
Also, https://www.explainxkcd.com/wiki/index.php/936:_Password_Strength does talk about this - but unless it is in the references, there is not too much depth there, e.g. a dictionary may have a certain number of words, but I doubt that they are all used equally - some werds oft encroaches upon my visage with verily greater frequency of occurrence by comparison to alterity, so while in the sense of spherical chickens sliding on a frictionless surface a dictionary attack "may not be viable", in practice I highly suspect that a way could be found to find, if not one specific password, then at least somebody's password within a large bank of them.)
I don't know how but I went way too long without a password manager. Changed my life. I recommend Bitwarden. I also use it to store like, my bank account number or my tax number.
Correcthorsebatterystaple (somebody link please)
Edit: Most places wont allow it due to character requirements and length limits, but it does work and is cryptographically sound.