5 ms·

The ONE thing stopping me from using a password manager is fear that I'll lose the master password. How do I get over this fear? Another thing is for example C

• 2arrs2ells 8y ago
  Use a password manager! The transition takes some time/effort, but once you have one fully set up (I adore 1password) it's both easier and far more secure than any scheme you keep in your head. Re: losing access - a 1password family plan allows your family members to recover your account. Or just write your master password down on paper and store it somewhere secure - like a safe or safety deposit box.
• mattferderer 8y ago
  Export your passwords on occasion & store somewhere safe is one method. You can export passwords in Chrome. Type chrome://settings/passwords into the URL & click the 3 icon settings to the right of Saved Passwords. Another option is to test the forgot password of your chosen password manager. See what options are & how comfortable they make you.
• falcolas 8y ago
  To keep track of your master password, just write it down and put it in your wallet/purse. We're used to and experienced with securing physical objects, and while it still offers an avenue to expose all your passwords, it requires a lot of extra work to do so. Basically, storing your master password physically only really vulnerable to highly targeted attacks.
  • thebluehawk 8y ago
    I would put it somewhere more secure than wallet/purse, unless you are forgetting your master password daily. I put mine in a place similar to a hidden folder in a filing cabinet. I haven't forgotten my master password yet, but I know that it's there if I need it.
    • falcolas 8y ago
      I would imagine that anyone who is dedicated enough to violate your person to obtain your master password would also not hesitate to violate your house to obtain your master password (in fact, they may do so first).
      • palebluedot 8y ago
        I think the concern is more that it is a lot easier to accidentally lose a wallet or purse (or have it stolen for unrelated reasons), rather than a targeted attack against your person for the master password.
        • falcolas 8y ago
          Well, the copy of it is just for backup purposes most times anyways, so the loss of the copy isn't going to be unrecoverable in most cases. And, as a bonus, you don't have to return home if you do forget it. And, as I mentioned earlier, we're really quite good at keeping track of wallets and purses in the first case. Losing them is typically (at least in my own experience) a once-in-a-decade event.
• Spooky23 8y ago
  Write it down on paper, put it in an envelope, and leave it in your home, preferably in a small fire resistant lockbox that you keep other important documents in. If your home isn't secure enough for this purpose due to roommates or other issues, ask a trusted friend, parent or relative to hold onto it and your other important documents on your behalf. If your situation makes putting it in someone else's hands a problem, you can split the password or other key material between multiple locations as well. 1Password makes it easy with the "rescue kit", and KeepassXC can use a combination of a password and file-based key for this purpose. Security conversations on this topic typically go down some rabbit hole about the government, police etc. Keep it simple and don't crawl into that hole. End of the day, in the United States, the most reliable and legally secure place is your home or in some cases an attorney's office.
  • philwelch 8y ago
    Not a safety deposit box at the bank?
    • Spooky23 8y ago
      Safe deposit boxes are an option but are expensive, inconvenient and often less secure. A bank clerical error, fubar, or payment issue could result in loss of the contents at any time. (See: https://sacramento.cbslocal.com/2018/07/26/safe-boxes-stolen-drilled https://sacramento.cbslocal.com/2018/07/26/safe-boxes-stolen... ) When you need your password at 4:30PM, the bank is closed. Also, it’s an awful place for important documents like a will, as the bank will require a court order for your family to open it upon your death.
• trey-jones 8y ago
  Writing your password down on paper seems reasonable. Personally I use something that I deem to be secure, which is a reasonably long, but memorable (for me) sentence, using a pretty large character set. Feel free to Math me wrong on that. I use LastPass (seem to be in the minority here - there are definitely some things about it that bother me; never tried 1Password). Password manager has simplified my life. Not much any more do I have to wonder which password I used where, etc.
• gregmac 8y ago
  If you're not using a password manager now, that implies you're already remembering at least one password. Using it on a regular basis is a good way to keep it in your head. You can setup your password manager authorization to expire periodically (eg, every 30 days) as well as on reboot. With LastPass (probably others) you can also mark certain sites as 'high security' and require entering your master password again. I do this with a small handful of sites, including my bank and domain registrar. I typically log into my bank once or twice a month. I very rarely reboot my devices (sleep + locked with a different password I have memorized and type in) so I don't get prompted for it that much otherwise, but enough that I have it memorized.
• graeme 8y ago
  Most password managers have an emergency kit, where you can print your master password and other info, and put it somewhere like a safe, bank vault, etc
• Sir_Cmpwn 8y ago
  Most services have a mechanism through which you can reset your password, usually email. Losing access to your password store isn't the end of the world.
• gregschlom 8y ago
  Use the password manager for everything except your main email account. If you loose the password to the manager (which is also a good idea to write down somewhere), you can always recover all the other passwords individually as long as you have access to your email.
• jarfil 8y ago
  Use a master passphrase instead of a password. Make it quite long, and personal, so that you won't forget it easily. The longer you make it, the more "obvious" (to yourself) can you make it sound, without compromising its security. Something like "It was a sunny afternoon the day I met my lovely puppy Rocket". Just use your own words, and the chances of anyone guessing it will be lower than those of brute forcing it. If you want to also have a shorter password for daily use, save it in a separate database protected with that long passphrase.
• pa7ch 8y ago
  I just remember two strong passwords. My master password for my manager and my gmail password. My gmail can recover pretty much all my other passwords. Also I keep backup secrets for my gmail as well. This feels robust enough, but backing up my password manager might be wise too.
  • mkesper 8y ago
    What if your gmail account gets locked due to reasons you're not even aware of? Oh wait, that couldn't possibly happen...