Bitwarden: Generate a Username

Re:Bitwarden: Generate a Username by 8organicbits on Wednesday May 04, 2022 @02:13PM (#31263921)

To defend against password stuffing attacks, I use unique passwords per site (saved to password manager, for convenience). Using a unique email address could help, but I wouldn't trust it. Determined attackers could try your stolen password against a large number of accounts to find where it works.

[ Parent | on HN ]

Re:Bitwarden: Generate a Username by lucideer on Wednesday May 04, 2022 @05:50PM (#31266305)

Ha. No no, I do of course use unique passwords per site. Distinct emails is just defense in-depth.

(it also helps a lot with tracing who's sold your data to a spammer)

[ Parent | on HN ]

Re:Bitwarden: Generate a Username by logifail on Thursday May 05, 2022 @09:37AM (#31273139)

Let's say your domain name is example.com

> Distinct emails is just defense in-depth. > (it also helps a lot with tracing who's sold your data to a spammer)

Not only that, if when you first sign up with BigCo you give them your email address as [email protected] then when one eventually stops dealing with BigCo one be certain that all email addressed to [email protected] can be rejected at your email server without a second thought, no need to scan for spam, just reject everything addressed to that alias.

A good friend of mine takes this a step further and does it through DNS (which of course he self-hosts as well as his mail server). He would give his email to BigCo as [email protected]. Once he's done with BigCo then he removes the records for bigco.example.com and there's no way to even look up a relevant mailserver to send email to [email protected]!

[ Parent | on HN ]