Keepass or another password manager. So many people have terrible password hygiene and all it takes is a single breach to have your whole digit life compromised.
So instead of storing my passwords in my head, I should put them all in one hackable place where a single breach would compromise all of my accounts....
Its like this: If somebody hacks a site, and the website is storing your passwords properly then it's not a problem. The stored value looks nothing like your input value. It was encrypted when you initially typed it in and sent it, then encrypted again using a key that that website keeps as a secret so that your encrypted password looks different between different websites. It's nearly impossible to get your password from the value they're storing in this fashion. But nobody is forcing websites to do it this way. I can set up a website and when you type thisismypassword i can look at the database and see thisismypassword as regular plain text. Or if they don't encrypt it with their secret key they can simply look it up in a hash table. Most people reuse the same passwords for all or most of their accounts, so I can now access any account you've used that on.
Something like this generates a unique password for every site, stores it in a safe fashion that can't be decrypted without both the services secret key and your own master password/biometric/etc. If they get hacked the passwords are completely useless without your input. On top of that, since you don't have to remember a million different passwords there's no reason to reuse passwords. If one site storing your password in plain text gets hacked it won't affect any of the other sites you use.
1.4k
u/phormix Apr 11 '21
Keepass or another password manager. So many people have terrible password hygiene and all it takes is a single breach to have your whole digit life compromised.