22 ms·

The whole point of a password manager is so you don't have to remember passwords. Why wouldn't you use unique random passwords? It even generates them for you.

minusf 4y ago
this would bite me in the worst possible moment when i need to login to somewhere and i lost my phone/battery dead/company hacked/etc. i have been using keepass(xc) since it's been around and i dont use random passwords. every year i create a formula that creates all my passwords and i put these in the vault. it also enforces password rotation. losing the vault i can still come up with any of my psswords just by remembering the formula. for company server services it's a different story, i generate wholly random strong passwords and store them in the offline vault. edit: typos
- ilyt 4y ago
  That looks like a lot of work. I just backup the password list separately from time to time
wpietri 4y ago
At least in my case, the first time I used a password manager it learned my existing ones from my browser, and many of those were non-random. From that point forward I used generated passwords, but I'm sure I still have hundreds of legacy ones that I didn't bother to go and change because the sites didn't matter that much to me.
- thechao 4y ago
  It’d be nice if, when I logged in to a site, my browser would casually mention if the pw is reused, or not. Now-a-days, I just habitually check my pw on login to make sure it’s random. For the SO & kiddos, I manually reset all the financial & identity defining pws (Google, Amazon, FB).
taikahessu 4y ago
If you create some new account on mobile, the workflow is messy. If you are on schedule like ordering a ticket, you just quickly try to get the job done. You need to know the specific order how to create the password for a new site. Otherwise it was just easier to plow through with your favourite memorised combination. At least I found it hard to do with Lastpass on mobile. Now I’ve tested it with Bitwarden and 1Password 8, they seem to do a better job with it.
deleted 4y ago
[deleted]

minusf 4y ago

this would bite me in the worst possible moment when i need to login to somewhere and i lost my phone/battery dead/company hacked/etc. i have been using keepass(xc) since it's been around and i dont use random passwords. every year i create a formula that creates all my passwords and i put these in the vault. it also enforces password rotation. losing the vault i can still come up with any of my psswords just by remembering the formula. for company server services it's a different story, i generate wholly random strong passwords and store them in the offline vault. edit: typos

ilyt 4y ago
That looks like a lot of work. I just backup the password list separately from time to time

wpietri 4y ago

At least in my case, the first time I used a password manager it learned my existing ones from my browser, and many of those were non-random. From that point forward I used generated passwords, but I'm sure I still have hundreds of legacy ones that I didn't bother to go and change because the sites didn't matter that much to me.

thechao 4y ago
It’d be nice if, when I logged in to a site, my browser would casually mention if the pw is reused, or not. Now-a-days, I just habitually check my pw on login to make sure it’s random. For the SO & kiddos, I manually reset all the financial & identity defining pws (Google, Amazon, FB).

taikahessu 4y ago

If you create some new account on mobile, the workflow is messy. If you are on schedule like ordering a ticket, you just quickly try to get the job done. You need to know the specific order how to create the password for a new site. Otherwise it was just easier to plow through with your favourite memorised combination. At least I found it hard to do with Lastpass on mobile. Now I’ve tested it with Bitwarden and 1Password 8, they seem to do a better job with it.

deleted 4y ago

[deleted]