3 ms·
I prefer hardware separation: just use old smartphone, without connection to internet, as password vault. No connection — no risk of stealing (except physical
by lisivka 11y ago
I prefer hardware separation: just use old smartphone, without connection to internet, as password vault. No connection — no risk of stealing (except physical stealing, of course, so use _old_ ugly smartphone, e.g. with broken screen).
Keep your important passwords encrypted with GPG on flash card, with backup on an another flash card. Regular GPG works flawlessly in terminal. Small shell script, which will ask for password and site name to display site password(s), will do the job on any Linux-compatible smartphone.
- smt88 11y agoThis would be really painful. Many of my passwords are more than 20 characters all over the keyboard, and I probably fill in passwords 20 times per day. Instead, I just use KeePass, which I protect with an offline SSH key as well as a strong password. In order to compromise my passwords, you'd need my KeePass database, access to one of my devices (laptop, desktop, but not phone), and my password.