Of course I’m not asking you to give away your passwords. But for those of you who have so many, how do you keep track of them all? Do you use any unique methods?

I know many people struggle between having something that’s easy to remember and something that’s easy to guess. If you keep a note with your passwords on it, for example, it can be stolen, lost, or destroyed, or if you make them according to a pattern that’s easy to remember, the wrong people might find them easier to guess.

  • randombullet@programming.dev
    link
    fedilink
    arrow-up
    2
    ·
    1 hour ago

    I use passphrases from movies of shows that I like. Then add a special symbol and a number that I like.

    Thanks for nothing you useless reptile!61

    This has 100.54 bits of entropy. I consider anything above 60 sufficient enough

  • shneancy@lemmy.world
    link
    fedilink
    arrow-up
    1
    ·
    2 hours ago

    i have difficult & long unique passwords for each of the important things (emails, bank, any official gov or edu sites etc.) that i keep on a piece of paper in my notebook (with a few backup copies). And i also have 3 degrees of difficulty for my other passwords that i use like this: easy “i could not care less if this account got hacked, in fact i know this password has been leaked in plain text before so whatever”, medium “i’d kinda suck if this got hacked but ultimately it’d not cause major issues”, hard “i do not want this to be hacked”

  • Nadru@lemmy.world
    link
    fedilink
    arrow-up
    4
    ·
    3 hours ago

    I have a friend who resets his passwords whenever he connects. So he only remembers one password, that of his email. He claims it’s safer this way.

  • traches@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    4
    ·
    4 hours ago

    For passwords you have to keep in your head, diceware. Surprised it’s not already mentioned! Basically you roll dice to choose words from a long wordlist until you have 6 or 7 words.

    Human brains are good at remembering words. It’s way easier to remember a password that looks like:

    grandson estimator virtuous scabbed poet parasitic
    

    than it is to remember a random character string.

  • PetteriPano@lemmy.world
    link
    fedilink
    arrow-up
    5
    ·
    6 hours ago

    I used to have a couple of letters from the site/service followed by an obscure dialectal word that’s not found in dictionaries with a few characters replaced by numbers and symbols. Those two letters kind of work like salting to keep every hash of my password unique.

    Now I just do bitwarden.

  • Evotech@lemmy.world
    link
    fedilink
    arrow-up
    2
    ·
    5 hours ago

    I remember them two characters at a time.

    Theres a couple of passwords I remember, like for logging on my PC and into my password manager

    • ERROR: Earth.exe has crashed@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      7
      ·
      15 hours ago

      I have Bitwarden set up with a feature called Emergency Access. The credentials to access that is just stores in plain text on a piece of paper in a drawer that I frequently use. If I ever forget my master password, I pull out the paper and use the Emergency Access feature, and start the timer, I set it at one or two weeks.

  • satanmat@lemmy.world
    link
    fedilink
    arrow-up
    4
    ·
    10 hours ago

    2 ways

    1 password manager

    1. I use them very often. I have a bunch of different yes complex passwords that I’m using repeatedly throughout the day so brute force rote memory….

    But yeah. Password manager

  • ERROR: Earth.exe has crashed@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    11
    ·
    edit-2
    14 hours ago

    Like other have said, Bitwarden.

    But I also would like to add: I use the Emergency Access feature in case of forgotten master password.

    You basically set up another account and do a sort of “public key exchange handshake” with your main account. Then your secondary account becomes a way to recover your main account.

    You can store the credentials to secondary account in plain text on a piece of paper in a drawer somewhere you have a habit of accessing (so you don’t forget where you put it). Its doesn’t matter if a snooping family member saw those credentials, theres a pre-set timer that needs to expire before access is granted. If I saw that timer being triggered, I’d know someone had been snooping, and I can just click deny access from my main account.

    So if you somehow forget your main password, you find the paper with your secondary account and use it to request access to your primary account. And well you’d have to wait out the timer, but its better than losing your vault forever and having to reset every password.