Re:I worked at LastPass as an engineer. My 2 cents on the si...
by DennisP on Sunday December 25, 2022 @09:03AM
(#34127303)
The whole point of a password manager is so you don't have to remember passwords. Why wouldn't you use unique random passwords? It even generates them for you.
[ Parent
| on HN ]
Re:I worked at LastPass as an engineer. My 2 cents on the si...
by minusf on Sunday December 25, 2022 @09:38AM
(#34127568)
this would bite me in the worst possible moment when i need to login to somewhere and i lost my phone/battery dead/ company hacked/etc.
i have been using keepass(xc) since it's been around and i dont use random passwords. every year i create a formula that creates all my passwords and i put these in the vault. it also enforces password rotation. losing the vault i can still come up with any of my psswords just by remembering the formula.
for company server services it's a different story, i generate wholly random strong passwords and story them in the offline vault.
Re:I worked at LastPass as an engineer. My 2 cents on the si...
by ilyt on Sunday December 25, 2022 @10:12AM
(#34127861)
That looks like a lot of work. I just backup the password list separately from time to time
Re:I worked at LastPass as an engineer. My 2 cents on the si...
by wpietri on Sunday December 25, 2022 @10:58AM
(#34128262)
At least in my case, the first time I used a password manager it learned my existing ones from my browser, and many of those were non-random. From that point forward I used generated passwords, but I'm sure I still have hundreds of legacy ones that I didn't bother to go and change because the sites didn't matter that much to me.
Re:I worked at LastPass as an engineer. My 2 cents on the si...
by thechao on Sunday December 25, 2022 @12:31PM
(#34129098)
It’d be nice if, when I logged in to a site, my browser would casually mention if the pw is reused, or not. Now-a-days, I just habitually check my pw on login to make sure it’s random. For the SO & kiddos, I manually reset all the financial & identity defining pws (Google, Amazon, FB).
Re:I worked at LastPass as an engineer. My 2 cents on the si...
by taikahessu on Sunday December 25, 2022 @01:01PM
(#34129442)
If you create some new account on mobile, the workflow is messy. If you are on schedule like ordering a ticket, you just quickly try to get the job done.
You need to know the specific order how to create the password for a new site. Otherwise it was just easier to plow through with your favourite memorised combination.
At least I found it hard to do with Lastpass on mobile. Now I’ve tested it with Bitwarden and 1Password 8, they seem to do a better job with it.