3 ms·

For a lot of users, a notebook next to the computer really is the best password manager possible. Someone physically stealing it really isn't the threat model w

For a lot of users, a notebook next to the computer really is the best password manager possible. Someone physically stealing it really isn't the threat model we're worried about, and for the frequency of logging into things, it's not a big deal to have to copy out of a book. Make the passwords memorable phrases ("correct horse battery staple") etc to make them easy to type in.

ethbro 7y ago
> Make the passwords memorable phrases ("correct horse battery staple") etc to make them easy to type in. (Insert obligatory XKCD on relative complexity) ... Gee, it sure would be nice if all sites simply allowed long-length passwords without bizarre, mutually-incompatible special character requirements. At least the 2017 updated NIST guidelines swung back sane (less complexity requirements, 64 character maximum). So in... a couple decades we'll be able to reliably use long passwords.