Re:I lost my OpenBSD full-disk encryption password
by TillE on Monday September 05, 2016 @04:02PM
(#12431972)
> stored only in your mind
A sticky note at home is reasonably safe, unless you're legitimately worried that a dedicated person may target you specifically.
Re:I lost my OpenBSD full-disk encryption password
by bigiain on Monday September 05, 2016 @07:58PM
(#12432895)
I have portions of my password safe passphrase stored with certain friends. If I get hit by a bus, those friends will almost certainly work out who each other are and what to do with the snippets they have. (And I "mind" several snippets of passphrase for some of them as well).
Not "nation state" secure, but I'm reasonable sure it's well beyond petty thief, curious cow-orker, 4chan/anonymous, or local LEO's capability to subvert.
Re:I lost my OpenBSD full-disk encryption password
by gramasaurous on Monday September 05, 2016 @03:31PM
(#12431873)
Unless you use a hardware password mgr which can emulate a USB keyboard :)
Losing the password that unlocks full disk encryption (FDE) is like losing the password that unlocks your password manager. At some point you have to have something stored only in your mind.
Now sure you could have your FDE password stored in a password manager as well but that's probably not a good idea. Also, compared to just about everything else saved in a password manager, you'd have to manually type the FDE password at boot. You can't copy/paste it as if anything your password manager would be running on a different computer.