3 ms·

Granted, the UI should allow paste and the password policy should allow complex passwords. But, since when are password managers best practice? I wouldn't wan

Granted, the UI should allow paste and the password policy should allow complex passwords. But, since when are password managers best practice? I wouldn't want to put all my eggs in one basket... It took me more than fifteen but less than twenty years to develop the ability to commit dozens of complex passwords to memory and change them frequently enough. I highly recommend that you develop this ability, too. Practice, practice.

glaslong 12y ago
> It took me more than fifteen but less than twenty years to develop the ability While the benefits are clear, this seems a tad unreasonable to ask users to do.
- hobarrera 12y ago
  Indeed. How is a 14-year-old with little experience in computing supposed to deal with this, if it took someone who's a lot more into it that long.
RandomBK 12y ago
You just can't expect the average user to go to such lengths. Password managers may not be perfect, but they are still an improvement over existing methods. This is incredibly useful when you're testing out a lot of online applications or apps that you may not ever use again - there's no way to have unique passwords for all of them without a password manager.
- cpncrunch 12y ago
  To be honest I don't really see the need to have different passwords for web services that I don't really care about.
hobarrera 12y ago
Sure, we can all remember the top 5 used passwords. Some of use can remember 10. Other 30. But there's not a chance in hell I remember every single password. My pass store currently has over 300 passwords. Some of which I've not used in ~1year. Good luck remembering that.
notjustanymike 12y ago
You put all your eggs in one egg. Should you pass, your passwords go with you, leaving your next of kin with an incredible headache.
- zorlem 12y ago
  Use Shamir's Secret Sharing Scheme [0] to store your master password and distribute pieces of the key to several relatives and close friends. [0] http://point-at-infinity.org/ssss/ http://point-at-infinity.org/ssss/
daveloyall 12y ago
Most replies here don't address the core question. The one that does suggests that password managers are second-best, not best practice. I'll accept these downvotes as a badge of honor! Do password managers have a history of being cracked (via keylogger if nothing else)? Of course this used to happen to browsers (which didn't used to even have a "master password"). I've personally fallen victim to malware that would automatically extract your password from the "remember password" feature of AOL Instant Messenger. Now, I never use that feature in any application. (I also never deliberately run malware anymore, except in a clean-install.)

glaslong 12y ago

> It took me more than fifteen but less than twenty years to develop the ability While the benefits are clear, this seems a tad unreasonable to ask users to do.

hobarrera 12y ago
Indeed. How is a 14-year-old with little experience in computing supposed to deal with this, if it took someone who's a lot more into it that long.

RandomBK 12y ago

You just can't expect the average user to go to such lengths. Password managers may not be perfect, but they are still an improvement over existing methods. This is incredibly useful when you're testing out a lot of online applications or apps that you may not ever use again - there's no way to have unique passwords for all of them without a password manager.

cpncrunch 12y ago
To be honest I don't really see the need to have different passwords for web services that I don't really care about.

hobarrera 12y ago

Sure, we can all remember the top 5 used passwords. Some of use can remember 10. Other 30. But there's not a chance in hell I remember every single password. My pass store currently has over 300 passwords. Some of which I've not used in ~1year. Good luck remembering that.

notjustanymike 12y ago

You put all your eggs in one egg. Should you pass, your passwords go with you, leaving your next of kin with an incredible headache.

zorlem 12y ago
Use Shamir's Secret Sharing Scheme [0] to store your master password and distribute pieces of the key to several relatives and close friends. [0] http://point-at-infinity.org/ssss/ http://point-at-infinity.org/ssss/

daveloyall 12y ago

Most replies here don't address the core question. The one that does suggests that password managers are second-best, not best practice. I'll accept these downvotes as a badge of honor! Do password managers have a history of being cracked (via keylogger if nothing else)? Of course this used to happen to browsers (which didn't used to even have a "master password"). I've personally fallen victim to malware that would automatically extract your password from the "remember password" feature of AOL Instant Messenger. Now, I never use that feature in any application. (I also never deliberately run malware anymore, except in a clean-install.)