Who still isn’t using a password manager?
What if I were to tell you my password manager password is the most vulnerable of all?
Nobody would guess it’s hunter2.
Mine is bigboipassword123. Can’t dictionary attack it cuz boi isn’t in the dictionary.
The most infuriating part is when this happens while using a password from a password manager
Then you finally do the password change, go to login and now the new password doesn’t work because you copied it to clipboard and overwrote it somehow in that small time frame goddamn shit! I always win+r and put it there until I know everything is all good.
My parents. All written down on paper in handy notebooks for anyone that breaks in. Two entire lives and everything in them just there for the taking.
My grandma does this, but they’re in one of the many Bibles she has in her home.
If I recall, a few (most) security experts now support written-on-paper passwords. Why? Because it is the solution for users who would otherwise commit far a more egregious security faux pas otherwise.
In most circumstances, it is easier to keep the notebook secure than your wallet, your car, etc. And let’s be honest, the list of suspects are REALLY short if someone breaks into your house, opens the third drawer, grabs the notebook and runs. And if it’s more than that and somebody ransacks your entire house, I guarantee having to change your passwords is the least of your headaches.
Ultimately, physical compromise is the lowest possible security risk for most people throughout their lives. Yes, it happens. Yes, it sucks. But having your bank password out in the wild with nobody realizing it is possibly far more dangerous.
I promise you that does not help.
I suspect a large number of these incidents are due to the password field in the login page allowing fewer characters than the field in the sign up page, so the password gets truncated. A couple of help desk meat shields have confirmed that for me, but mostly I think this because it seems to fix itself if I use a shorter password.
How short, you ask? Who tf knows! They sure as shit won’t tell you! Just spend the next 20 minutes trying shit til it works, because you have nothing better to do with your time!
My company doesn’t tell you what the AD policy is for changing your domain logon password but windows will just tell you that it doesn’t meet the policy. What IS the password policy you ask?
Well it’s uh… 🤷♂️
Try again!
I am annoyed on your behalf.
I’ve had goons tell me they can’t tell me the character max because of “security”
I do use a password manager but this shit still happens. Does anyone know why? Something to do with a “password hash”, I think…
1 week later: EZ Pass has majority of user passwords compromised, giving hackers access to bank records of 8 million Americans.
That’s even more reason to use a password manager. You’re far more likely to have unique passwords per site. If one gets compromised, others don’t.
Idk who is safe to use for password mgmt. I haven’t seen data leaks for my banking institutions who probably have enforced regulations for IT security. Are there standards in place for password manager products? What brands are reputable?
