4 ms·
I've tried a password manager. The fact that losing one password would mean losing all of my passwords really bothered me. It's not commonly talked about, but
by pnathan 15y ago
I've tried a password manager. The fact that losing one password would mean losing all of my passwords really bothered me.
It's not commonly talked about, but it's possible to have multipassword encryption. I wonder if a password manager out there supports it. (I think GPG can, so if you consider a test file & gpg a password manager... ;) )
One scheme: There'd be the "normal" login, which would be rotated, then another ultra-high-entropy one written down and locked in a safe somewhere. That way when you spaced out your password, it'd not be "whoops, just blew my credentials... all of them".
- mseebach 15y agoSince it's only one password, and there's no maintenance overhead, write it down on a piece of paper, wrap it in tinfoil and seal it in an envelope. Stick the envelope in the bottom of your desk drawer. If you're afraid of losing the password in a fire simultaneously with you forgetting it, repeat for your mothers desk drawer. Yes, if someone who knows you well physically targets you for your password, that person will likely succeed. But he would probably also succeed using this method: http://xkcd.com/538/ http://xkcd.com/538/
- dredmorbius 15y agoSo: Use a password manager. Export the saved passwords, print on paper, and put in a safe place. Distribute encrypted versions of the passwords on various systems you use, with one very well known and recoverable password. Or encrypted against multiple passwords. There's a risk, yes, but it's reasonable fungible. And yes, actually, GPG is my password manager ;-)