Password security

Topic

New Reply

How do you protect your passwords?  Seems that if you store them online, an app that looks bulletproof today could be hacked tomorrow.  No matter how careful you are at devising passwords, they are still vulnerable.

1 user thanked author for this post.

Microfix

Reply | Quote

Replies

I would never store passwords online for exactly the reason you say. It’s not IF a site will be hacked, it’s WHEN. For a similar reason I would not store passwords on a computer unless I had an absolutely fail safe way of retrieving them in case of hardware or software failure. Of course nothing is absolutely fail safe so you have to make your own judgement about what works for you. I make as few online accounts as I possibly can, and I store my PWs the old fashioned way – paper, pencil, lockbox. I use a couple of other tricks so that even if the PWs were stolen they would be of no use unless the thief knew some other information. But I don’t advertise what those tricks are.

4 users thanked author for this post.

Myst, Charlie, Slowpoke47, Microfix

Reply | Quote

I do not use a password manager (with exception below) or store any of my passwords online. I store my list of passwords in two places – one for use and one for backup. The backup is an encrypted password protected Word document which is stored on a drive that is not connected to a PC except to be updated. The Working list I use is in an encrypted password protected Note document stored on my iPhone. To see the working list you must enter my iPhone’s enhanced password and then the password for the encrypted document. No passwords are stored on any of my PCs (see exception below) or online yet they are readily available with my phone.
The only exception to this is I use Chrome’s password manager to keep and handle those passwords for web sites pose a low risk if hacked such as Ask Woody or a news site.

HTH, Dana:))

3 users thanked author for this post.

Myst, Slowpoke47, Microfix

Reply | Quote

I don’t use passwords manager cloud or in a browser.
I use an encrypted document with backup for the passwords that I don’t remember (I do remember ~15 passwords).
I change my bank’s password every month although I log-in using iPhone’s FaceID.

1 user thanked author for this post.

Slowpoke47

Reply | Quote

Encrypted technology within a password manager has worked here for a good few years now. One lengthy complex password to remember, reveals all my stored passwords and less taxing on my own memory cells..I just DON’T do anything browser related or cloud connected.
Have backups outwith our humble home also as an extra measure, buried next to a relative at a cemetry just in case a meteor hits the house, remember the movie plot of the classic spaghetti western ‘the good, the bad and the ugly’ lol

Windows - commercial by definition and now function...

2 users thanked author for this post.

Myst, Slowpoke47

Reply | Quote

Drcard:)) wrote:

The only exception to this is I use Chrome’s password manager to keep and handle those passwords for web sites pose a low risk if hacked such as Ask Woody or a news site.

How do we know it was YOU who posted this? /s

Windows - commercial by definition and now function...

1 user thanked author for this post.

Slowpoke47

Reply | Quote

This week’s article is exactly how to protect passwords.
I don’t recommend storing passwords in browser managers.

Susan Bradley Patch Lady/Prudent patcher

1 user thanked author for this post.

Slowpoke47

Reply | Quote

Your writeup prompted me to post this thread.

Reply | Quote

OP here- my thanks to all who have posted on this.  My own strategy, in keeping with my caveman persona, is a 3×5 card file with p/w’s and other site-pertinent info that lives in a fireproof safe when not in actual use and whose location will not be mentioned here.  Like Alex5723 and probably others, several often-used p/w’s also live in my head.

Glad to know I’m not the only one who questions the wisdom of storing such online.

Those sites using 2-factor identification, e.g. a return phone call supplying a typically 6-digit code, are appreciated and all but that process begins with a password too.

2 users thanked author for this post.

DrBonzo, Charlie

Reply | Quote

I use an offline password store – there is just too much data to keep in a non dedicated app, from security questions to CC details, passports, computer model / serial… Plus my manager will enter the credentials into sites / apps / email and anything else I use. It also works on my phone and I have a backup in the cloud in case I need a copy in an emergency.
All I need to do is remember one strong password.

cheers, Paul

3 users thanked author for this post.

windbg, Myst, Slowpoke47

Reply | Quote

None. My password are simple and I have them all memorized. I have only two passwords- email and computer. If I get hacked, than fine. I do not use account for anything important. Plus my email locks me out for months since have no cell phone.

Reply | Quote

DrBonzo wrote:

I would never store passwords online for exactly the reason you say. It’s not IF a site will be hacked, it’s WHEN.

I’m with DrBonzo on this, and have been for 20+ years.

Human, who sports only naturally-occurring DNA ~ oneironaut ~ broadcaster

2 users thanked author for this post.

Slowpoke47, DrBonzo

Reply | Quote

Paul T wrote:

I use an offline password store

Yup.

Human, who sports only naturally-occurring DNA ~ oneironaut ~ broadcaster

Reply | Quote