Re:I lost my OpenBSD full-disk encryption password
by rwmj on Monday September 05, 2016 @03:25PM
(#12431852)
Scribbling the passwords in a notebook isn't a bad idea (although don't write "My Passwords" on the front cover). The security of physical things is well understood by most humans.
[ Parent
| on HN ]
Re:I lost my OpenBSD full-disk encryption password
by koolba on Monday September 05, 2016 @04:34PM
(#12432106)
> Scribbling the passwords in a notebook isn't a bad idea (although don't write "My Passwords" on the front cover). The security of physical things is well understood by most humans.
"Not Passwords" :D
Re:I lost my OpenBSD full-disk encryption password
by imh on Monday September 05, 2016 @05:30PM
(#12432325)
I don't write down my most important passwords and they're randomly generated gibberish. About a month back, for whatever reason I just couldn't remember one for a minute and it damned near gave me a heart attack. I think I ought to go with your strategy now.
Re:I lost my OpenBSD full-disk encryption password
by koolba on Monday September 05, 2016 @06:14PM
(#12432519)
> I don't write down my most important passwords and they're randomly generated gibberish.
How the hell do you remember randomly generated gibberish of a length that would be cryptographically secure?
Multi-word passphrases work great for me for everything that has to be kept in my mind safe. If I had to remember things like "LOZOktjR33IxVbACQsgicUtDubOyz9o2" I'd definitely have to drink less.
Re:I lost my OpenBSD full-disk encryption password
by LoSboccacc on Monday September 05, 2016 @06:23PM
(#12432549)
Even better, store the password with recovery instructions in your will. That's both safe and available because wills share many of the security treats of passwords. And it's also a good backup plan for your relatives to access bank accounts, cancel subscription services etc in the event of accidents.
Re:I lost my OpenBSD full-disk encryption password
by prawn on Monday September 05, 2016 @08:00PM
(#12432903)
And/or maybe in a sealed and tamper-evident container. So you or your family can access it in an emergency, but you will know if this has occurred. The hiding location could be outlined in your will?
Re:I lost my OpenBSD full-disk encryption password
by LoSboccacc on Tuesday September 06, 2016 @06:09AM
(#12434788)
how would a physical tamper resistant container work? just curious. if it's something one can buy, what prevents an attacker to buy one same container itself to replace the damaged after the fact?
Re:I lost my OpenBSD full-disk encryption password
by samuellb on Tuesday September 06, 2016 @08:35AM
(#12435477)
Sealed with tape, with your signature on the tape? And/or some tiny mark on the container that's hard to find.
Re:I lost my OpenBSD full-disk encryption password
by LoSboccacc on Wednesday September 07, 2016 @05:40AM
(#12441933)
ah silly me I was thinking about buyable products but that sounds both easy and feasible
Re:I lost my OpenBSD full-disk encryption password
by chrisper on Monday September 05, 2016 @03:54PM
(#12431941)
Just put the notebook in a safety deposit box.
Re:I lost my OpenBSD full-disk encryption password
by gaius on Monday September 05, 2016 @04:40PM
(#12432126)
You already have a lifetime of training for taking care of small, folding pieces of paper in your wallet.
Re:I lost my OpenBSD full-disk encryption password
by zokier on Monday September 05, 2016 @05:24PM
(#12432308)
That is true only for rapidly decreasing part of the population, especially in certain parts of the world.
Re:I lost my OpenBSD full-disk encryption password
by snowwrestler on Monday September 05, 2016 @11:06PM
(#12433425)
Think of it as a small, non-folding piece of plastic in your wallet, then.