this post was submitted on 14 Aug 2024
597 points (96.3% liked)

Privacy

31736 readers
627 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

It is truly upsetting to see how few people use password managers. I have witnessed people who always use the same password (and even tell me what it is), people who try to login to accounts but constantly can't remember which credentials they used, people who store all of their passwords on a text file on their desktop, people who use a password manager but store the master password on Discord, entire tech sectors in companies locked to LastPass, and so much more. One person even told me they were upset that websites wouldn't tell you password requirements after you create your account, and so they screenshot the requirements every time so they could remember which characters to add to their reused password.

Use a password manager. Whatever solution you think you can come up with is most likely not secure. Computers store a lot of temporary files in places you might not even know how to check, so don't just stick it in a text file. Use a properly made password manager, such as Bitwarden or KeePassXC. They're not going to steal your passwords. Store your master password in a safe place or use a passphrase that you can remember. Even using your browser's password storage is better than nothing. Don't reuse passwords, use long randomly generated ones.

It's free, it's convenient, it takes a few minutes to set up, and its a massive boost in security. No needing to remember passwords. No needing to come up with new passwords. No manually typing passwords. I know I'm preaching to the choir, but if even one of you decides to use a password manager after this then it's an easy win.

Please, don't wait. If you aren't using a password manager right now, take a few minutes. You'll thank yourself later.

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 9 points 2 months ago (4 children)

Using Proton Pass was a game changer to me , I don't have to ignore the necessity to put a strong and complicated password for security reasons anymore, Proton generate it to me and stores everything ( so I don't need to remember which password I set for which account ) But the bad aspects of cloud services worry me a little about this: the possibility of a security breach of the service, or the possibility of not being able to access it for any reason is a real disaster if it happens... so I'm thinking of exporting my passwords to another safe place for such cases.

[–] [email protected] 2 points 2 months ago* (last edited 2 months ago)

You can export all your passwords to an encrypted and password protected file. I ocasionally back it up to a USB device so that I always have an offline copy available.

Still, one of these days I was logged out of my proton pass on Android and couldn't connect to the internet. I was locked down.

[–] [email protected] 2 points 2 months ago

so I’m thinking of exporting my passwords to another safe place for such cases.

I'm also using ProtonPass, and I agree it's a game changer. I love the interface, the Android app is amazing and well integrated.

To not be locked in into ProtonPass in case of real disaster, once a month I export the ProtonPass data and import to KeepassXC in my local machine. It's pretty easy, you just have to export to CSV, and import into KeepassXC, the interface will help you to map the CSV fields accordingly, and you will have a local accessible backup in case of disaster. Don't forget to remove the CSV from your computer after importing to KeepassXC.

[–] [email protected] 5 points 2 months ago

even if their servers were compromised it's all encrypted. it only decrypts on your end

[–] [email protected] 6 points 2 months ago (2 children)

But the bad aspects of cloud services worry me a little about this

KeePassXC is entirely local.

[–] [email protected] 6 points 2 months ago (1 children)

Which creates issue with having to synchronize it between devices. There is always something to worry about :)

[–] [email protected] 3 points 2 months ago (2 children)

Don't let perfect be the enemy of good.

[–] [email protected] 1 points 2 months ago

Exactly, so use Proton :P

[–] [email protected] 3 points 2 months ago

that's nice soundbite, i am just saying you have to be realistic. if you are aiming at people who up until now had their passwords on post-it on the monitor, switching to tool where you need to come up with some synchronization system on your own might not be what convinces them.

[–] [email protected] -1 points 2 months ago (3 children)

I know , but won't that affect my storage if I added +1000 password ?

[–] [email protected] 11 points 2 months ago (1 children)

unless your storage is a floppy disk, won't be a problem

[–] [email protected] 1 points 2 months ago (1 children)

I actually considered sticking it on a floppy disk I have. It really is a wonder how Linux is able to recognize floppy disks immediately...

[–] [email protected] 1 points 2 months ago

It really is a wonder how Linux is able to recognize floppy disks immediately...

As is Windows.

[–] [email protected] 3 points 2 months ago

Passwords don't take up much space.

[–] [email protected] 9 points 2 months ago

It shouldn't take up too much space. My personal password file is under 2 KB, so for you it may be 1 MB at most.