Re:Protecting Secrets from Computers (2023)
by Vecr on Tuesday January 30, 2024 @03:16AM
(#39187570)
Wear a helmet and hip pads, but failing that split the password in half (as in literally the first half and the second half, don't try to get fancy with crypto) and give the halves to two people unlikely to collude. Your computer will no longer have 5th amendment protection, though.
Re:Protecting Secrets from Computers (2023)
by kilmanio on Tuesday January 30, 2024 @05:22AM
(#39188409)
Or better, use `Shamir's Secret Sharing`
Re:Protecting Secrets from Computers (2023)
by couchand on Tuesday January 30, 2024 @07:49AM
(#39189490)
GP specifically called out, "don't try to get fancy with crypto" and I'm inclined to agree with them for this use case.
Re:Protecting Secrets from Computers (2023)
by SSNLF on Tuesday January 30, 2024 @03:18AM
(#39187585)
You could try Entropy Keycrypt -> https://entropykey.com/features
Re:Protecting Secrets from Computers (2023)
by charcircuit on Tuesday January 30, 2024 @03:03AM
(#39187502)
Write it down on a piece of paper.
Re:Protecting Secrets from Computers (2023)
by a_imho on Tuesday January 30, 2024 @06:31AM
(#39188852)
Biometrics?
Re:Protecting Secrets from Computers (2023)
by sirsuki on Tuesday January 30, 2024 @07:12AM
(#39189188)
Yes. Place the secrets in a secured (symmetric encrypted) document. Then print the password for that document and hand it to a loved one, trusted family member/friend, or lawyer.
Re:Protecting Secrets from Computers (2023)
by Loic on Tuesday January 30, 2024 @07:54AM
(#39189522)
My wife has my passphrases in her password manager and I have her passphrase in my password manager.
This is maybe not the most secure way to do it, but this is good enough for our threat model.
These are offline password managers.
Re:Protecting Secrets from Computers (2023)
by JackSlateur on Tuesday January 30, 2024 @08:01AM
(#39189593)
Use the good old post-it method
Remember poe : what's hidden in plain sight is never found (and nobody is looking anyway)
Re:Protecting Secrets from Computers (2023)
by pclmulqdq on Tuesday January 30, 2024 @09:07AM
(#39190258)
Shamir's secret sharing with 3 separate lawyers is kind of hard to beat if you have cryptocurrency or other similar assets that absolutely need a password to recover it, and it is a relatively easy algorithm to run. Give them the same instruction sheet on how to run the algorithm, plus a different second page with their fragment of the key.
Most of the time, though, the "call us" approach actually works, and you can give your relatives power of attorney to handle this.
Even with a password manager that requires me to remember only a few passphrases (personal and work being two), there is a non zero chance now that a fall and a concussion would lock me out of my password manager.
Anyone else have a solution or a suggestion for this problem?