I am frustrated by password managers auto-generating nonsense. It increases the friction in moving away from a specific manager and people essentially become lo

I am frustrated by password managers auto-generating nonsense. It increases the friction in moving away from a specific manager and people essentially become locked out of accounts if they can't access their password manager. I imagine that leads to weaker passwords anyway for things like shared accounts. I like the encrypted sync between my devices but never use the suggested passwords. Using TOTP 2FA should be the primary second factor enforced everywhere. If you use Aegis on android or Raivo for ios, you control your 2FA secrets and can make encrypted cloud backups. I can't see myself ever using YubiKeys or Passkeys because I don't want to worry about hardware failure. Additionally, the chrome/ios roll out of passkeys requires it to be associated with your Google/Apple account and is tied to your login. Google passkeys don't support linux and don't plan to. Veracrypt is stable and replaced truecrypt for me years and years ago. I am not sure why bitlocker would be recommended over Veracrypt. For true full-disk encryption, I thought it was still best to use a BIOS/UEFI set password so the prompt happens before boot. My understanding is that this is independent of OS. From the last time I checked, bitlocker has slightly better OS integration, but veracrypt allows compatibility and decryption with linux. I like veracrypt for situations where I need things to be portable and able to be backed up in the cloud or need access across OSes. Is there a benefit in using bitlocker? I like GitHub's push in this area. When ssh keys were first being forced for signing/authentication for commits, I was annoyed that I couldn't use passwords. But I realized that I was more annoyed about having to change my workflow, and it doesn't slow me down now that I've done it a few times. https://xkcd.com/936/ https://xkcd.com/936/