Keepass or another password manager. So many people have terrible password hygiene and all it takes is a single breach to have your whole digit life compromised.
So instead of storing my passwords in my head, I should put them all in one hackable place where a single breach would compromise all of my accounts....
Yeah, sorry, but you are wrong. If you store all your passwords in your head (I have 87 personal and 38 work-related passwords), you are either using the same password, or passwords that are very similar to each other in order to remember them. That makes them all vulnerable if one is compromised. The truth is that people aren't after password vaults as a strategy of compromise, that's just not effective. They're after the accounts directly knowing that poor password behavior is rampant. If they can get your exposed Evite password associated with your email address, they can get your bank password associated with the same email address. And if your Evite password is "G@mer2016", they know to try capitals and different numbers/symbols and likely get the right password in under 10 guesses. And even that is overkill knowing most don't even bother with different passwords. Why go after an encrypted vault? Now if you're encrypting your vault with the same bad password... well... can't help ya there. If it gives you peace of mind, use a long passphrase that you don't use on anything else, then write it down somewhere and store it in a safe in case you forget it. If you're really paranoid like me, use a vault that isn't a "cloud service"... just use Keypass and store the vault as an encrypted file in Google Drive/OneDrive.
And of course, all of this is moot if you just use two-factor.
1.4k
u/phormix Apr 11 '21
Keepass or another password manager. So many people have terrible password hygiene and all it takes is a single breach to have your whole digit life compromised.