4 ms·

Why would you need to write your password on a post-it note if you use a password manager? Also, why would the note need to be specifically "on your desk"? If I

Why would you need to write your password on a post-it note if you use a password manager? Also, why would the note need to be specifically "on your desk"? If I really had no other choice than writing down a password, I would keep it in a more subtle/hidden place (my wallet, or my phone case, or in my locker). That's still not secure against a targeted attack, but I wouldn't be the lowest hanging fruit at least. Also, if you are able to reset the master password of your password manager, then something is seriously wrong with the solution your company uses. Advice for a good and rememberable master password: use a passphrase. 6 random words are easier to recall than lots of characters. Throw in one number and one capital letter in two random places (replacing o with 0 or i with 1 is not random, neither are start and end of words), use a special character as words separator, and you got an easy to remember password that checks all the security requirements. Heck, even using a line or two from the lyrics of a song you know (but obviously not your favorite or the one you sing every morning) is easier and better than most passwords. Some time ago I used the first line of "Toxicity" by System of a Down, when I didn't have the time to craft a good passphrase. Checks all the marks (special chars and numbers included), and was not anymore guessable than a random passphrase during the short time I used it.

jongjong 2y ago
I only use a password manager on my work computer because my boss forces me to. I find your question more surprising! Why would you use a password manager voluntarily? It's a torture device. I use it because my paycheck depends on it. What's your excuse? If I care about a service, I care enough to remember the password. Everything else might as well be a post-it-note on my desk... Though I prefer a simple one-word password that I can easily remember.
- yjftsjthsd-h 2y ago
  > If I care about a service, I care enough to remember the password. Wait, no; you just said, > My biggest pet peeve is when the platform forces me to add certain special characters to my password, then I need to write down my altered password and put it on a post-it note on my desk to remember it. So can you remember passwords or not? > Though I prefer a simple one-word password that I can easily remember. See, that makes it sound like you can't remember secure passwords and just want to use insecure passwords.
- imtringued 2y ago
  Why would a password manager be a torture device? The effort needed to remember hundreds to thousands of passwords sounds way worse. That last paragraph sounds like you're the type of person that has caused security problems in the past.
- cafeinux 2y ago
  Most renown password managers are well integrated, making their use (usually) easier than just typing out a password. There's a good chance your company chose a outlier, or that the company or yourself don't use it correctly (and training employees to use the mandated tools is not always obvious to companies). This with the resettable password makes me think your company should really think again about which solution they chose. I use a password manager in my daily life because I have 3 e-mail accounts, two domains, a cloud service not tied to any of my E-mail accounts, two banking accounts and the need to sometimes log into my wife's account (because she asks me to while she's at work), one PayPal account, and other services for which I wouldn't dare to write down the password to, nor would I dare to use the same password (or slight variations) for them. Using a password manager makes all of these easy to use at the click of a button, without me needing to remember any. Post-it notes get lost, thrown away, burn, suffer water damage, and are bothersome to copy for backup purposes. Online password managers take care of backing up the DB for you, or if you don't trust them, offline solutions as pass or KeePass (and variations) let you backup the DB on offline drive and store them safely while you continue to use the main DB. What's your excuse?
- tstrimple 2y ago
  So that you can have secure and unique passwords for every site. It's pretty simple really. Prevents people from doing stupid things like putting their passwords on sticky notes for example.

jongjong 2y ago

I only use a password manager on my work computer because my boss forces me to. I find your question more surprising! Why would you use a password manager voluntarily? It's a torture device. I use it because my paycheck depends on it. What's your excuse? If I care about a service, I care enough to remember the password. Everything else might as well be a post-it-note on my desk... Though I prefer a simple one-word password that I can easily remember.

yjftsjthsd-h 2y ago
> If I care about a service, I care enough to remember the password. Wait, no; you just said, > My biggest pet peeve is when the platform forces me to add certain special characters to my password, then I need to write down my altered password and put it on a post-it note on my desk to remember it. So can you remember passwords or not? > Though I prefer a simple one-word password that I can easily remember. See, that makes it sound like you can't remember secure passwords and just want to use insecure passwords.
imtringued 2y ago
Why would a password manager be a torture device? The effort needed to remember hundreds to thousands of passwords sounds way worse. That last paragraph sounds like you're the type of person that has caused security problems in the past.
cafeinux 2y ago
Most renown password managers are well integrated, making their use (usually) easier than just typing out a password. There's a good chance your company chose a outlier, or that the company or yourself don't use it correctly (and training employees to use the mandated tools is not always obvious to companies). This with the resettable password makes me think your company should really think again about which solution they chose. I use a password manager in my daily life because I have 3 e-mail accounts, two domains, a cloud service not tied to any of my E-mail accounts, two banking accounts and the need to sometimes log into my wife's account (because she asks me to while she's at work), one PayPal account, and other services for which I wouldn't dare to write down the password to, nor would I dare to use the same password (or slight variations) for them. Using a password manager makes all of these easy to use at the click of a button, without me needing to remember any. Post-it notes get lost, thrown away, burn, suffer water damage, and are bothersome to copy for backup purposes. Online password managers take care of backing up the DB for you, or if you don't trust them, offline solutions as pass or KeePass (and variations) let you backup the DB on offline drive and store them safely while you continue to use the main DB. What's your excuse?
tstrimple 2y ago
So that you can have secure and unique passwords for every site. It's pretty simple really. Prevents people from doing stupid things like putting their passwords on sticky notes for example.