News for hackers. Stuff that matters.

A comment on Ask HN: Anyone else constantly forget which SSO service they signed up with?.

Re:Ask HN: Anyone else constantly forget which SSO service t... by randomhodler84 on Wednesday March 02, 2022 @06:03PM (#30534647)
Stop using SSO, and use email aliases for each site. Eg: myname+context _at gmail. (Gmail ignores everything right of the + but it will be treated as the myname mailbox). This keeps emails unique and helps detect when sites leak your email address (and pwd hashes).

Generate complex passwords in a password manager like 1password. Store usernames and passwords with the site to allow auto filling or search and copy/paste.

[ Parent | on HN ]
Re:Ask HN: Anyone else constantly forget which SSO service t... by tracker1 on Wednesday March 02, 2022 @07:30PM (#30535493)
Nifty feature, if you register you domain on google domains, it includes free email forwarding including wildcards... so I use foo.com at mydomain for each site.

Also use Bitwarden and keep almost everything in there, with an 18 character passphrase for bitwarden itself.

[ Parent | on HN ]