Loading…
19
A guy on Reddit tore apart my 'strong' password system, and he was right
I used to think I was being clever. Same base password, just swap the symbols and add the site name to the end. Bank gets a ! and a 7, email gets a # and a 9, that kind of thing.
Six weeks ago I posted my system in a comment thread thinking people would say it was smart. One guy broke it down in two sentences. If one site gets hacked and my password shows up in a dump, he can guess every other login in about five minutes. The pattern is the password.
I sat with that for a day and felt pretty dumb. Then I signed up for Bitwarden and let it make 16 character random strings for everything. I only remember the one master passphrase now, and I wrote that down on paper in a drawer like some kind of caveman.
Weird part is it is way less work than my old system. No more guessing which symbol I used for which site.
Question for people who have been doing this longer: how do you handle the master password on your phone? Typing a long passphrase every time is already getting old.
Wait. I just read the rules again and the body is supposed to be empty. Leaving it up anyway since the answer is already typed out.
0 comments
Log in to join the discussion
Log In0 Comments
No comments yet
Be the first to share your thoughts on this discussion.