3 ms·
A password manager is not the only solution. A memorized good-enough hash function operating on (fixed-salt, service provider's name, possibly a salt storable i
by jhanschoo 5y ago
A password manager is not the only solution. A memorized good-enough hash function operating on (fixed-salt, service provider's name, possibly a salt storable in plaintext perhaps accessible to public)->unique password is very strong for most people and is more portable than a password manager.
- UncleMeat 5y ago> most people I think you dramatically overestimate how many people can do this consistently for years on end. People who don't use a password manager simply reuse passwords. That's what they've always done. Any solution that ignores this observation is doomed to fail.
- jhanschoo 5y agoI disagree, since I think it has more to do with lack of education that this is something you can do; have a simple deterministic algorithm for generating passwords based on your service. It's far more convenient than a password manager, and can avoid the single-point-of-failure.