Pwned Passwords in Practice: Real World Examples of Blocking the Worst Passwords

Re:Pwned Passwords in Practice: Real World Examples of Block... by SCdF on Tuesday May 29, 2018 @08:23AM (#17178455)

It does sound a bit silly, but the alternative is to keep them in your brain, and AFAICT it's impossible to do that these days. I have hundreds of accounts in my password manager, I couldn't possibly remember secure passwords for all of them.

FWIW I'm not a fan of keeping them in some cloud service dedicated for storing passwords (1PW's subscription offering, lastpass) because if someone is going to break into servers and steal passwords it's going to be from those fine people.

A middle ground is to use something like KeePass, where the encrypted password file is stored where you want it to be stored (ie your hard drive), where you can manage how you want to distribute that file between places you need it.

[ Parent | on HN ]

Re:Pwned Passwords in Practice: Real World Examples of Block... by jermaustin1 on Tuesday May 29, 2018 @08:57AM (#17178687)

I use PasswordSafe which is open source, and I have it backed up to my dropbox (so my phone can access it). It is less convenient than most of the password managers out there having browser plugins that will automatically fill in your password, or generate one right in the text box, but the data is mine.

I still have to rely on the mobile app which isn't open source, but it is the recommended app from the main developer.

[ Parent | on HN ]