4 ms·
I am. I use a system where I have a complex master password that is memorized that I mix with a unique password that I write down. It's not a perfect system, bu
by tobiasSoftware 5y ago
I am. I use a system where I have a complex master password that is memorized that I mix with a unique password that I write down. It's not a perfect system, but it protects me from the three main attack vectors: an online attacker using a dictionary attack, an online attacker who knows one password and is checking for repeated passwords, and an offline attacker looking for a written password.
The main disadvantage is that it doesn't protect against is if someone is focused on me specifically and has compromised multiple passwords and figures out the pattern. However, I've always been wary of password managers as a single point of failure. At the very least, I have concerns about how a password manager would function when I want to use a password at work that was created on my home computer. Currently, I can easily write down my unique password on a slip of paper, and even if someone finds it they wouldn't be able to successfully use it.
- Waterluvian 5y agoI use a similar approach where I have a master password combined with characters I derive using a simple algorithm from the name of the company or website. A problem I run into is when I get forced to reset it and cannot reuse it.