6 ms·

I use strong passwords generated by 1Password for everything.. except for iCloud. There I have an idiot password. Why? Because freaking iPhone asks for that wh

by eknkc 12y ago

I use strong passwords generated by 1Password for everything.. except for iCloud. There I have an idiot password. Why? Because freaking iPhone asks for that when I want to download something from App Store. How do you guys handle that?

gyardley 12y ago
I've memorized a non-idiot password I use solely for iCloud.
- deleted 12y ago
  [deleted]
aaronbrethorst 12y ago
TouchID.
- eknkc 12y ago
  Yeah, how about the first time? I mean, I do not buy apps all the time, maybe once a week. And I'd have my battery dead or something like that in between those attempts. So, I never had a chance to just hold my thumb on the home button and go my way.
  - robszumski 12y ago
    I have this problem all the time. My current process is to: 1. open the App store but don't click on anything 2. hit home button 3. launch keepass client 4. navigate to apple account entry 5. copy password 6. double tap home button to bring up multitasking menu 7. tap app store 8. click install 9. paste password It feels really stupid doing it, but you can get pretty quick at it. I can't wait for my next iPhone upgrade with touchid.
  - ptwiggens 12y ago
    This is really easy. You have one good password for 1pass, and one good password for iCloud. If you can manage to memorize one, you can memorize two.
    - eknkc 12y ago
      My real problem with this is writing the password with numbers, punctuation and stuff on a mobile keyboard. Feels like surgery even if I'd memorize it. I use 1P on my laptop most of the time so it's not a huge deal. Everything else on the iPhone just remembers credentials. I know I can force myself to use a great password for iCloud but my point is that most of the time, I'd go for an idiot password rather than forcing myself. Just like most people.
      - djrogers 12y ago
        This may help, some special characters dump the keyboard back to the primary keyboard, so create a password that is letters, then numbers/specials, then the ' character, then more letters. for example, pass2'word would only require you to hit the alt-keyboard switch once.
      - metacorrector 12y ago
        that little voice in your head that is screaming "i hate this" is your problem. It really is not a big deal to type a password, and even to type it a few times, just try to have a more zen attitude about it. It's how passwords work, stop trying to figure out how to defeat your own password, it's doing what it's supposed to do.
      - sgibat 12y ago
        A good password doesn't need all that stuff. Just use something of sufficient length. A sentence, for example.
jberryman 12y ago
lastpass on android has the ability to insert your passwords into app login forms (via a custom keyboard / accessibility API, I think). I don't know if the same is true on iOS
- ja27 12y ago
  No, but there's hope it'll be supported under iOS8's app extensions and custom keyboards. It does have it's built-in browser for now.
matznerd 12y ago
Check out PasswordPilot on jailbroken devices :)
sbarre 12y ago
Don't use an "idiot" password, use a long password.. Good passwords aren't complex, they're LONG.. "this is a really dumb password" is probably actually a really good password. ;-) And also, your "problem" is simply your decision to trade security for convenience. You need to weigh the risks vs. reward and make the choice for yourself. If something goes wrong, at least you'll know why.
- runn1ng 12y ago
  The problem is to tap all of that into your phone, every time iOS decides it desperately needs it again, with just stars instead of letters. That's annoying.
  - hyperpape 12y ago
    It's a pain, but really not that bad. You tweet from your phone (or use email/SMS/whatever else). 20 characters is manageable and secure, as long as it's randomly generated.
    - runn1ng 12y ago
      If it's randomly generated, it's impossible to remember to fill in on your phone. Unless you have it on a piece of paper in your wallet.
      - deleted 12y ago
        [deleted]
      - vertex-four 12y ago
        Really? I remember quite a few four-word (xkcd-style) random passphrases.
        hyperpape 12y ago
        Bingo. I'm actually thinking of diceware.
hrabago 12y ago
You can use a different password for purchasing apps, and a different password (Apple ID) for your iCloud data. This goes for Game Center as well. You can use a different one for your mean, nasty, trash talking Gamer persona. Apple doesn't always make this clear, and I see a lot of people confused about this, but this is an option. Another login that can use a different Apple ID is Find My iDevice.
- Serow225 12y ago
  OK I must be dumb today, but I can't figure out how to do this and Google isn't helping me either - can you describe, or point me to a link, on how to set this up? Thanks!
  - ejdyksen 12y ago
    I think it's that you can use different Apple IDs for each of these things.
  - hrabago 12y ago
    First, create a new Apple ID. If you want to use this for your App Store account, go into Settings then "iTunes & App Store", and sign out of the previous account. Log in using then different (new) Apple ID. If you want to use this for your iCloud account, go into your iDevice's Settings, then iCloud, then "Delete Account". It will delete the iCloud data on your phone, but it should still be available on iCloud servers, and any other device hooked up to that account. I haven't looked into how to transfer data from one iCloud into another.
shirro 12y ago
I don't get Apple's password based security at all. The stupid question/answer thing they forced everyone to do was just crazy. You have a physical device in your possession. Apple don't seem to have heard about two factor auth. If the only company on the planet that obsessively ties consumer hardware and software into a single cohesive product can't get their shit together the future worries me. It should be the default (with an opt out for access from non-apple devices) for every Apple service to authenticate with the device as well as the password. Anyone who steals your Apple login but not your phone should have zero chance of accessing your data.
- berberich 12y ago
  They've had two-step authentication since March of 2013: http://support.apple.com/kb/ht5570 http://support.apple.com/kb/ht5570
  - deanclatworthy 12y ago
    Only available in certain countries though. Mine being one that isn't yet available (Finland).
    - __e 12y ago
      Their FAQ says it's available in Finland
  - ja27 12y ago
    Except the article seems to be saying that Apple's two-factor auth isn't required to access iCloud backups and that it only protects account details, payment methods, etc.
    - IBM 12y ago
      Adding two-factor gets rid of the security questions and would have prevented them from getting the password though.
NhanH 12y ago
I've been using a scheme that involve easy to type password, like: qwertyuioplkjhgfdsa/ qazcdetgbmju / rtyujhgfvbnm (if you 're wondering how to memorize those password, looks at the QWERTY keyboard). Combining with number and capitalization, I feel pretty good about my odd of surviving the brute force/ dictionary attack. But I can't quite quality the exact amount of combinations for those schemes. Can anyone tell me why this would potentially be a bad idea?
- dredwerker 12y ago
  I don't think it will necessarily work because some cracker has just probably added that to their personal dictionary(if they didn't before). It might work if you add 3.14159627 to it or a number/symbol set of your choice. I guess length is fairly key as well.
- ja27 12y ago
  You should look at some wordlists. A lot of qwerty / qazwsx / asdf combinations appear.
Timothee 12y ago
I have 1Password for iPhone and copy the generated password from there every time I need it. Certainly a pain but worth it. In the end, it doesn't take that long: 1Password is on my home screen, the Apple login is favorited and I can type my master password fairly fast. The most annoying part really is switching between apps. I also have my phone set up for iOS not to ask for the password for 5 or 15 minutes (can't remember the exact option) after I entered it.
deleted 12y ago
[deleted]

by eknkc 12y ago

gyardley 12y ago

I've memorized a non-idiot password I use solely for iCloud.

deleted 12y ago
[deleted]

aaronbrethorst 12y ago

TouchID.

eknkc 12y ago
Yeah, how about the first time? I mean, I do not buy apps all the time, maybe once a week. And I'd have my battery dead or something like that in between those attempts. So, I never had a chance to just hold my thumb on the home button and go my way.
- robszumski 12y ago
  I have this problem all the time. My current process is to: 1. open the App store but don't click on anything 2. hit home button 3. launch keepass client 4. navigate to apple account entry 5. copy password 6. double tap home button to bring up multitasking menu 7. tap app store 8. click install 9. paste password It feels really stupid doing it, but you can get pretty quick at it. I can't wait for my next iPhone upgrade with touchid.
- ptwiggens 12y ago
  This is really easy. You have one good password for 1pass, and one good password for iCloud. If you can manage to memorize one, you can memorize two.
  - eknkc 12y ago
    My real problem with this is writing the password with numbers, punctuation and stuff on a mobile keyboard. Feels like surgery even if I'd memorize it. I use 1P on my laptop most of the time so it's not a huge deal. Everything else on the iPhone just remembers credentials. I know I can force myself to use a great password for iCloud but my point is that most of the time, I'd go for an idiot password rather than forcing myself. Just like most people.
    - djrogers 12y ago
      This may help, some special characters dump the keyboard back to the primary keyboard, so create a password that is letters, then numbers/specials, then the ' character, then more letters. for example, pass2'word would only require you to hit the alt-keyboard switch once.
    - metacorrector 12y ago
      that little voice in your head that is screaming "i hate this" is your problem. It really is not a big deal to type a password, and even to type it a few times, just try to have a more zen attitude about it. It's how passwords work, stop trying to figure out how to defeat your own password, it's doing what it's supposed to do.
    - sgibat 12y ago
      A good password doesn't need all that stuff. Just use something of sufficient length. A sentence, for example.

jberryman 12y ago

lastpass on android has the ability to insert your passwords into app login forms (via a custom keyboard / accessibility API, I think). I don't know if the same is true on iOS

ja27 12y ago
No, but there's hope it'll be supported under iOS8's app extensions and custom keyboards. It does have it's built-in browser for now.

matznerd 12y ago

Check out PasswordPilot on jailbroken devices :)

sbarre 12y ago

Don't use an "idiot" password, use a long password.. Good passwords aren't complex, they're LONG.. "this is a really dumb password" is probably actually a really good password. ;-) And also, your "problem" is simply your decision to trade security for convenience. You need to weigh the risks vs. reward and make the choice for yourself. If something goes wrong, at least you'll know why.

runn1ng 12y ago
The problem is to tap all of that into your phone, every time iOS decides it desperately needs it again, with just stars instead of letters. That's annoying.
- hyperpape 12y ago
  It's a pain, but really not that bad. You tweet from your phone (or use email/SMS/whatever else). 20 characters is manageable and secure, as long as it's randomly generated.
  - runn1ng 12y ago
    If it's randomly generated, it's impossible to remember to fill in on your phone. Unless you have it on a piece of paper in your wallet.
    - deleted 12y ago
      [deleted]
    - vertex-four 12y ago
      Really? I remember quite a few four-word (xkcd-style) random passphrases.
      - hyperpape 12y ago
        Bingo. I'm actually thinking of diceware.

hrabago 12y ago

You can use a different password for purchasing apps, and a different password (Apple ID) for your iCloud data. This goes for Game Center as well. You can use a different one for your mean, nasty, trash talking Gamer persona. Apple doesn't always make this clear, and I see a lot of people confused about this, but this is an option. Another login that can use a different Apple ID is Find My iDevice.

Serow225 12y ago
OK I must be dumb today, but I can't figure out how to do this and Google isn't helping me either - can you describe, or point me to a link, on how to set this up? Thanks!
- ejdyksen 12y ago
  I think it's that you can use different Apple IDs for each of these things.
- hrabago 12y ago
  First, create a new Apple ID. If you want to use this for your App Store account, go into Settings then "iTunes & App Store", and sign out of the previous account. Log in using then different (new) Apple ID. If you want to use this for your iCloud account, go into your iDevice's Settings, then iCloud, then "Delete Account". It will delete the iCloud data on your phone, but it should still be available on iCloud servers, and any other device hooked up to that account. I haven't looked into how to transfer data from one iCloud into another.

shirro 12y ago

I don't get Apple's password based security at all. The stupid question/answer thing they forced everyone to do was just crazy. You have a physical device in your possession. Apple don't seem to have heard about two factor auth. If the only company on the planet that obsessively ties consumer hardware and software into a single cohesive product can't get their shit together the future worries me. It should be the default (with an opt out for access from non-apple devices) for every Apple service to authenticate with the device as well as the password. Anyone who steals your Apple login but not your phone should have zero chance of accessing your data.

berberich 12y ago
They've had two-step authentication since March of 2013: http://support.apple.com/kb/ht5570 http://support.apple.com/kb/ht5570
- deanclatworthy 12y ago
  Only available in certain countries though. Mine being one that isn't yet available (Finland).
  - __e 12y ago
    Their FAQ says it's available in Finland
- ja27 12y ago
  Except the article seems to be saying that Apple's two-factor auth isn't required to access iCloud backups and that it only protects account details, payment methods, etc.
  - IBM 12y ago
    Adding two-factor gets rid of the security questions and would have prevented them from getting the password though.

NhanH 12y ago

I've been using a scheme that involve easy to type password, like: qwertyuioplkjhgfdsa/ qazcdetgbmju / rtyujhgfvbnm (if you 're wondering how to memorize those password, looks at the QWERTY keyboard). Combining with number and capitalization, I feel pretty good about my odd of surviving the brute force/ dictionary attack. But I can't quite quality the exact amount of combinations for those schemes. Can anyone tell me why this would potentially be a bad idea?

dredwerker 12y ago
I don't think it will necessarily work because some cracker has just probably added that to their personal dictionary(if they didn't before). It might work if you add 3.14159627 to it or a number/symbol set of your choice. I guess length is fairly key as well.
ja27 12y ago
You should look at some wordlists. A lot of qwerty / qazwsx / asdf combinations appear.

Timothee 12y ago

I have 1Password for iPhone and copy the generated password from there every time I need it. Certainly a pain but worth it. In the end, it doesn't take that long: 1Password is on my home screen, the Apple login is favorited and I can type my master password fairly fast. The most annoying part really is switching between apps. I also have my phone set up for iOS not to ask for the password for 5 or 15 minutes (can't remember the exact option) after I entered it.

deleted 12y ago

[deleted]