5 ms·
What's your personal threat model? I'm always trying to balance the risk of a party focused on security vs the minimal effort I'm likely to put into it. I don't
by karmakaze 5y ago
What's your personal threat model? I'm always trying to balance the risk of a party focused on security vs the minimal effort I'm likely to put into it. I don't want to be a story about the guy that lost their password to a wallet or anything else important. I used to be able to reliably remember complex passwords reliably but finding that's no longer the case, now only shorter intermittently used ones based on how often I have to use "reset password".
- DougN7 5y agoI’ve decided that besides a password manager, all of my passwords will also have a number at the end, like 8 (simple, easy to append manually in a password field. Now the password manager has to get defeated AND my own small personal salt value will have to be known.
- argestes 5y agoNow we know
- willis936 5y agoNow you know that there is some sort of salt. That isn't helpful to an attacker trying to cryptographically crack a password if they already have the password database.
- yawaworht1978 5y agoGood idea, I would add a yubikey to that, for an additional step.
- lunarboy 5y agoThis is a good idea that's never occurred to me. I guess you could also consider it like having one password for all your accounts, except salted with some random string from your password manager
- mongol 5y agoWill it always be 8? Or will it vary?