Password Security, Anyone Know?

[AccelR8]

I changed my password here a few days ago. It is a strong password. Additionally I have no passwords that are used on more than one site. They are all unique, complex and secure.

I had used NordPass for a while but we (wife and I) had a lot of trouble with it so I quit using it. So here comes my question.

What’s the best way to manage passwords? An easy one for the lay-person to use so she doesn’t change her passwords back to her initials and house address and use it for every site ?

(I have edited my original post because, well, Too Much Information I thought)

 

[WSnyder]

I've been using 1Password for a long time. For the most part I haven't had any issues between several devices. PC, Mac, iOS all connected to one encrypted vault so if something is added or changed through one device it's all accessible by the other devices. My password for the password manager would be much much harder (like impossible) to guess or crack than your computer. I don't trust the browsers.

Don't let your web browser save your passwords — here's what to do instead

Browsers just aren't safe enough to hold that kind of information

www.tomsguide.com

 

[rijndael]

I would check out KeePass or KeePassXC. If you can't back it up locally, put the password file in your OneDrive/Drive account.

 

[DngBat7]

The iT guys at my wife’s work make them use Bitwarden for that. Pretty highly rated

 

[Eagle Six]

I would not recommend using any browser password manager. I use NordPASS and over the years from time to time I have had issues. It works 99.9% of the time flawlessly and I feel it is safe and secure as it can be and worth the occasional issue. However I fully understand that it may aggravate your wife and therefore aggravate you! You may want to try other encrypted password managers as others have suggested.

 

[AccelR8]

Don't let your web browser save your passwords — here's what to do instead

Browsers just aren't safe enough to hold that kind of information

www.tomsguide.com

Wow I had no idea!

 

[AccelR8]

Before Nordpass I was using, and still have it to use if needed, a three ring binder with several pages containing user names and passwords, all arranged by website name alphabetically. With no passwords stored electronically anywhere. Passwords changed and binder updated periodically.

But that's a lot I guess to ask a person to use when there's easier methods and it led to the aforementioned password-changing to a simple pw and sharing across sites ("It's safe because of security questions and two-factor authentication"). For me it doesn't seem like too much effort to use the binder but I'm not the decider on this (GWB reference there )

 

[Jayplace]

I just stick with my adult film stage name +1234. It's "Hard to Crack"

I'm anxious to hear how others simply handle multiple site passwords.
I understand it's preferable to use individual passwords for each site, but seriously, I have over 75 different locations that require a password. Some have remained the same for years and some change every 3-4 months and some every 6 months and they keep requiring more and more combinations. My memory just isn't that good. About the time I learn them, they change.

 

[DirtySteve]

3x5 card..

 

[LonewolfMcquade]

I'm anxious to hear how others simply handle multiple site passwords.
I understand it's preferable to use individual passwords for each site, but seriously, I have over 75 different locations that require a password. Some have remained the same for years and some change every 3-4 months and some every 6 months and they keep requiring more and more combinations. My memory just isn't that good. About the time I learn them, they change.

I have a little notebook on my end table I keep all my passwords in. Makes it a lot easier..

 

[WSnyder]

I'm anxious to hear how others simply handle multiple site passwords.

Like mentioned above, use a password manager. You then have one master password. You intentionally make that one longer, harder to near impossible to crack. I have a very long nonsensical phrase. I used to do the notebook thing but that got out of hand and someone can physically take it.

 

[memilanuk]

Bitwarden

 

[JMayo]

I use an app called safe notes to list my passwords to all my sites.
I have to go there regularly to see what i used.

 

[COLT45SA]

Hackers are everywhere~!! So if Xfinity's files can be hacked, as it was recently,why would you want to put all your passwords on a supposedly :secure: site~?? That site can be hacked at some time and ALL your passwords to all your sensitive sites will be vulnerable.

 

[Forum Boss]

Regarding password storage by Browsers. One common browser allows the user to see all stored passwords with the entry of four numbers… the SAME login numbers used to start a Windows desktop session.

So if a keystroke tracker gets on your machine even just at the start, you could lose all browser-stored passwords.

I recommend keeping a printed copy of passwords, off the computers.

 

[rijndael]

It's game over if there's a keystroke logger. That applies to a browser password or a dedicated application for passwords ... unless you use something like a FIDO key for auth of that safe. Even then, you'll be outed for each password as they're copied and pasted around.

 

[AccelR8]

Well after reading up on it, no more browser pw storage for me. I would prefer to go back to my binder with hand written passwords which would be the most secure for me but if the entire household won't use it then it is not the best security solution.

I went back to NordPass and right away began to experience all the things I was unhappy with. I am trying out ProtonPass which right now looks pretty good.

 

[AccelR8]

Hackers are everywhere~!! So if Xfinity's files can be hacked, as it was recently,why would you want to put all your passwords on a supposedly :secure: site~?? That site can be hacked at some time and ALL your passwords to all your sensitive sites will be vulnerable.

I understand LastPass, one of the most-used pw managers, has been hacked twice!

 

[praveen]

Bitwarden

 

[Eagle Six]

I went back to NordPass and right away began to experience all the things I was unhappy with. I am trying out ProtonPass which right now looks pretty good.

Would you care to share the problems you are unhappy with as well as a comparison between Nord and Proton?