this post was submitted on 14 Aug 2024
596 points (96.3% liked)

Privacy

32165 readers
131 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

It is truly upsetting to see how few people use password managers. I have witnessed people who always use the same password (and even tell me what it is), people who try to login to accounts but constantly can't remember which credentials they used, people who store all of their passwords on a text file on their desktop, people who use a password manager but store the master password on Discord, entire tech sectors in companies locked to LastPass, and so much more. One person even told me they were upset that websites wouldn't tell you password requirements after you create your account, and so they screenshot the requirements every time so they could remember which characters to add to their reused password.

Use a password manager. Whatever solution you think you can come up with is most likely not secure. Computers store a lot of temporary files in places you might not even know how to check, so don't just stick it in a text file. Use a properly made password manager, such as Bitwarden or KeePassXC. They're not going to steal your passwords. Store your master password in a safe place or use a passphrase that you can remember. Even using your browser's password storage is better than nothing. Don't reuse passwords, use long randomly generated ones.

It's free, it's convenient, it takes a few minutes to set up, and its a massive boost in security. No needing to remember passwords. No needing to come up with new passwords. No manually typing passwords. I know I'm preaching to the choir, but if even one of you decides to use a password manager after this then it's an easy win.

Please, don't wait. If you aren't using a password manager right now, take a few minutes. You'll thank yourself later.

(page 3) 50 comments
sorted by: hot top controversial new old
[–] Jivebunny@lemmy.world 5 points 3 months ago

Why preach to this choir? I get you, but we also get it.

[–] Zicoxy3@lemmy.ml 4 points 3 months ago (5 children)

I have been using password gestoires for a long time. First LastPass, until I switched to GNU/linux and discovered Keepass and then KeepassXC.... For me they are indispensable. That's the one I used until about 1 year ago when I started having problems with the Firefox addon. It did not recognize the pages. I tried ProtonPass and I like it, but I don't like having them online, no matter how secure the site is. I've tried going back to KeepassXC, locally, but the file I export from ProtonPass won't load in KeepassXC. I feel stuck.

Translated with DeepL.com (free version)

load more comments (5 replies)
[–] Templa@beehaw.org 4 points 3 months ago* (last edited 3 months ago) (2 children)

I migrated from Bitwarden to Proton Pass (mostly due to their OTP integrations) and I am enjoying it very much. They are constantly improving it, which is also a plus.

load more comments (2 replies)
[–] nullroot@lemmy.world 4 points 3 months ago (1 children)

I've been using Firefoxs integrated password manager for lots of unimportant logins, KeePass for everything else.

load more comments (1 replies)
[–] greywolf0x1@lemmy.ml 4 points 3 months ago (2 children)

If you're on Linux and you don't want to use KeepassXC, you can check out Secrets on Flathub, it has imo a better UI/UX

load more comments (2 replies)
[–] StanislavP@lemmy.world 4 points 3 months ago

I always recommend Proton Pass. A) because they have a forever free version and B) because hopefully they start looking into the whole suite in general and even if they don't subscribe, they are more aware afterwards (hopefully).

[–] monobot@lemmy.ml 4 points 3 months ago (3 children)

It is truly upsetting to see how complicated for use password managers are.

I grow up around computers and I can barely mange them. Other people just don't understand how to use them, it is complicated and inconvenient. Even after I set them up and show them multiple times, friends don't manage.

In browser password managers cover 90%, but I guess web sites and apps need to start testing UX for password managers. Some of them introduce stupid flows that brake all of them.

Android is complete shit show.

It is not users, but applications and UX that doesn't care about security.

[–] MerchantsOfMisery@lemmy.ml 3 points 3 months ago (1 children)

Bitwarden on Android, particularly if you have biometric unlock enabled, is extremely simple to setup and use.

load more comments (1 replies)
load more comments (2 replies)
[–] Abracadaniel@hexbear.net 3 points 3 months ago (2 children)

so is it bad to store my 2FA backup codes as notes in those same login's bitwarden entries?

[–] kevincox@lemmy.ml 3 points 3 months ago

It depends on your threat model. It does mostly reduce the benefit from 2FA, but you are probably still very safe if you use a random password per site. I mostly use 2FA when forced (other than a few high-value accounts) so I don't worry about it. For most people having a random password which is auto-filled so that you don't type it into the wrong site is more than sufficient to keep themselves secure.

[–] Lumun@lemmy.zip 3 points 3 months ago

I do this too. I would need them if I lost my phone, so bitwarden/keepass is a good place for them to be.

I think it is less secure though since someone who somehow has the unencrypted vault without your 2FA device could get in with the codes - but if someone cracks my master password I'm screwed in a whole bunch of ways so I'm not sure it matters too much at that point.

[–] x@niwego.com 3 points 3 months ago

@Charger8232 I have been using Vaultwarden (Unofficial Bitwarden compatible server written in Rust) selfhosted for a few years now, and I have to say I'm very happy with it. I also use the backup strategy, on some media (USB stick and SSD) encrypted with Veracrypt.

load more comments
view more: ‹ prev next ›