2 ms·
This is essentially an extreme version of the the "digital bootstrapping" problem that I ponder more regularly than is probably healthy. It often seems like an
by bityard 4y ago
This is essentially an extreme version of the the "digital bootstrapping" problem that I ponder more regularly than is probably healthy. It often seems like an intractable problem but I think n decent solution that doesn't require a lot of work looks like this:
1. Have an encrypted file of secrets that you can access with an offline password manager like KeepassDX. This file contains not only the logins to your web accounts, but also all of your financial information like bank accounts and credit cards, drivers license number, social security numbers, etc. Protect it with ONE strong password that you memorize. Use it daily to reinforce memorization. All other accounts you have, secure them with a random password and put them in this file. You only want to remember the ONE master password. You can use browser and browser extensions for sites that don't matter much in the grand scheme of things but NOT for critical sites like bank accounts because we all know browsers are the #1 target of attackers and regularly face security problems.
2. If you have multiple devices, share the KeepassDX file somewhere "in the cloud" with something like Nextcloud or similar proprietary service that actually syncs a copy to the local device. You basically want it available in multiple places, automatically if at all possible. I wouldn't post it publicly, but don't fret too much about it falling into the wrong hands because if you remember, it's protected by a strong password that you have memorized. For added safety, copy the password file to a thumb drive every month or so and keep it in your car or your desk at work.
3. Keep all of your important digital data (financial records, family photos, etc) on a NAS in your house. If you live alone and just have one "main" computer, then an external disk will do. Encrypt the disks, put the key in your password manager.
4. Back up your NAS to remote storage every night. This can be a raspberry pi at a relative's house, or a cheap VPS, also with encrypted disks that only you have the key to.
There are many variations to this, but the overall idea is to have ONE strong master password that you memorized and are forced to recall regularly which protects ONE file containing ALL of your secrets, ONE place to store your important documents, and MULTIPLE distributed backups/copies of all of these.