this post was submitted on 14 Aug 2024
598 points (96.3% liked)

Privacy

34054 readers
181 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

It is truly upsetting to see how few people use password managers. I have witnessed people who always use the same password (and even tell me what it is), people who try to login to accounts but constantly can't remember which credentials they used, people who store all of their passwords on a text file on their desktop, people who use a password manager but store the master password on Discord, entire tech sectors in companies locked to LastPass, and so much more. One person even told me they were upset that websites wouldn't tell you password requirements after you create your account, and so they screenshot the requirements every time so they could remember which characters to add to their reused password.

Use a password manager. Whatever solution you think you can come up with is most likely not secure. Computers store a lot of temporary files in places you might not even know how to check, so don't just stick it in a text file. Use a properly made password manager, such as Bitwarden or KeePassXC. They're not going to steal your passwords. Store your master password in a safe place or use a passphrase that you can remember. Even using your browser's password storage is better than nothing. Don't reuse passwords, use long randomly generated ones.

It's free, it's convenient, it takes a few minutes to set up, and its a massive boost in security. No needing to remember passwords. No needing to come up with new passwords. No manually typing passwords. I know I'm preaching to the choir, but if even one of you decides to use a password manager after this then it's an easy win.

Please, don't wait. If you aren't using a password manager right now, take a few minutes. You'll thank yourself later.

(page 2) 50 comments
sorted by: hot top controversial new old
[–] [email protected] -1 points 6 months ago* (last edited 6 months ago) (5 children)

I use a password pattern. I have hundreds of different passwords all stored in my head and all between 10-20 characters long. The trick is to have a deterministic formula for picking a password.

Example: short word + First 6 in url + symbol + short word capitalised + number

Let's say the first word is cat and second is dog, symbol is - and number is 5 and you have a Gmail it would give you

"catgmail-Dog5"

https://www.passwordmonster.com/ gives it 61 years to crack this one but if you use longer words you get better times.

load more comments (5 replies)
[–] [email protected] 4 points 6 months ago (4 children)

It is truly upsetting to see how complicated for use password managers are.

I grow up around computers and I can barely mange them. Other people just don't understand how to use them, it is complicated and inconvenient. Even after I set them up and show them multiple times, friends don't manage.

In browser password managers cover 90%, but I guess web sites and apps need to start testing UX for password managers. Some of them introduce stupid flows that brake all of them.

Android is complete shit show.

It is not users, but applications and UX that doesn't care about security.

[–] [email protected] 3 points 6 months ago

What's wrong with android? I have bitwarden setup any basically any time I tap a password field it offers me to fill in from my vault.

load more comments (3 replies)
[–] [email protected] 2 points 6 months ago (1 children)

I used to use a plain text system, "encoded" in such a way that only I knew what the actual password was, and I kept it on Google Keep.
But that for harder and harder to manage, coupled with, if I were to get run over by a bus, no one else would be able to access my accounts.

Now I've been using Dashlane for a few years. Not just for passwords, but secure notes as well.

Works seamlessly on all of my devices and zero complaints.

[–] [email protected] 1 points 6 months ago* (last edited 6 months ago)

I do exactly this (the google keep notes plain text encoded passwords idea), right now. Perhaps I'll go the same route as you then.. I was wondering what manager to use.

[–] [email protected] 2 points 6 months ago* (last edited 6 months ago) (1 children)

I have the need to have different accounts to everything. Hate to perform the sign up process over and over again. They really need to standardize this.

Passkeys is one step forward but far from enough.

I hate the idea of having to login again and again with just a minute interval that I see BankID requires as it is for different things. Like I constantly have to prove it is still me here. BankID is the app in my country that gives you access to your Bank account, government stuff and so on. It connects to your personal number and ID you in real life.

So the issues you describe is just the result of how bad designed the web is today. It is simple for every company but hard for the user.

[–] [email protected] 1 points 6 months ago (2 children)

I am curious what country you're from that they require a specific app for "official" business.

[–] [email protected] 3 points 6 months ago

Sweden

They don't require it, you can also go to a physical office if you don't have BankID. Also BankID is a private company wo is problematic on several levels.

Many government agencies have started accepting multiple ways to identify yourself such as Freja.

Some politicians would prefer a standardized governmental solution to identity.https://www.dagensps.se/bors-finans/kinberg-batra-infor-statlig-bank-id/

I'm not so sure about that though.

It's an ongoing topic. We'll see more where it goes.

load more comments (1 replies)
load more comments
view more: ‹ prev next ›