Passwords

[oldbrownhat]

How do you keep track of them?

How many do you have?

Do you change them?

I have so many now, that I have a book for them. I don't change them like recommended, and I do not store them on the internet. I suppose I ought to boil it down to a few

The proper solution to this is to use a password manager like 1Pass. About $36/year. A free alternative is BitWarden, which also has an inexpensive paid version. There is a good overview on NYT's "Wirecutter" here.

With a password manager, you can store an unlimited number of passwords, and generate a password of any length or complexity. I've been using LastPass for a few years but will prob. switch to 1Pass next year.

Here's a sample password I just asked LastPass to create. You can specify the length and complexity:

Password managers are available for all platforms. You can also (and should) export the password file so you can keep a copy on a spare drive. You just need to create a good master password to log in to the manager, which you only need to do if you have logged out or shut down your computer/mobile. Often recommended is a phrase you can remember, like "I was Maggie_Thatcher's 1st denturist" Most will also require 2-factor authentication, which is a small annoyance but good insurance. I get this via an authenticator app on my phone, but I believe there are other options. Mine has an option to "trust this computer/device for 30 days" which bypasses the 2FA requirement.

Using simple passwords like, say "357 Registered Magnum" may be OK for sites like this, but bank accounts, social media and such need a higher level of protection these days. For better or worse, "we're not in Kansas any more."

 

[TJm15.38]

I keep mine in a password protected word file. I have so many, this is the only way I know to keep up with them. There has to be a better way!

 

[Rustyt1953]

 

[glenwolde]

I use Chrome to save my passwords, and use their random weirdo password generator that generates passwords like %65GHFr#62iOp

 

[Buford57]

One facetious one serious - you guess which.

I've been using Password123 for everything. You mean I should mix it up?

What happens when your password storage service account gets hacked? Do they indemnify you?

 

[Golddollar]

The old fashioned way, pen and paper.

 

[glenwolde]

Without a password manager, it's very difficult. I use the password manager. The risk is if somebody hacks that, they have access to everything. The Chrome system is hard to hack though, as not only is there 2-factor authentication, there's a passphrase you need in order synch and get access to the encrypted passwords. Foolproof? no. Nothing is. With the auto fill password managers you get protection from keyboard loggers. I change my passwords for critical accounts all the time. It's just too hard to keep up with using pen and paper, which I may not have with me when I need it.

Using pen and paper they usually don't get changed often enough.

 

[oldbrownhat]

I still use them for my handloading notes. Very handy and I have access to them even if the power goes out...

Handloading in the dark? What could possibly go wrong?

 

[pantannojack]

I so pray that some day law enforcement/doj will do something when thieves are caught other than fining the home owner for a garage door left open a minute.

 

[oldbrownhat]

3x5 cards in a small wooden box in my home office.

And for folks with LOTS of passwords, you can always upgrade

 

[AugieTN]

Keep in mind, no matter how strong your password is, if the server gets hacked your password is exposed

I was doing work in a data center and an administrator had just loaded Windows NT on a server, and it got hacked before he was able to load the updates.

 

[oldbrownhat]

 

[Walkin Horse]

What happens if you forget your password to your password manager?

 

[oldbrownhat]

What happens if you forget your password to your password manager?

Yer pooched

Actually, there are procedures to reset it, which vary from product to product. The providers do not have access to it, though and cannot recover it for you. Another reason to always keep a hard copy or text version!

 

[YeshuaIsa53]

Never having to go into the computer for major changes, that is the one I forgot/lost/whatever. Now I write most of them down with a pencil. No banking on the computer. No apps at the doctors do I download. Two of the few apps I downloaded were Solitary and Chess. I now get texts asking me to play.

 

[Bekeart]

Web Pages LIE about Password

Your Password is Case Sensitive.

Your Password is Incorrect.

LIES! Neither "Case Sensitive" nor "Incorrect" would work.

Bekeart

 

[MetalMan]

She uses LastPass. I use a legal pad.

I use LastPass as well…

 

[MetalMan]

With a password manager, you can store an unlimited number of passwords, and generate a password of any length or complexity. I've been using LastPass for a few years but will prob. switch to 1Pass next year.

Any particular reason for considering to move from LastPass to 1Pass?

 

[Bald1]

I use the same password for everything because you generally need a capital letter a lower case letter and a numeral with at least eight total digits. So Rusty1953 works

 

[steelslaver]

I use 2 peoples birth dates and convert them to hexadecimal and put a symbol in according to my private formula

Lincolns birthday 02121809
Washington 02221732
0212180902221732 converted to HEX is C0FA374E17A4 and the 3rd number is a 7 so 7 in I put an # (third symbol on keyboard) C0FA374#E17A4 and every third letter goes to lower case for
C0Fa374#E17A4

all I need to actually remember is whose birthdays and which number I used to set the symbol and lower case letter. But, I can also keep it handy to copy and paste by using it as the title of a photo on my desk top. If you don't name photos the computer gives them odd combinations so it doesn't even look odd