pass_throwaway

4 ms·

1. 1.▲
   by pass_throwaway 4y ago

   In addition to the fact that password managers can be single points of failure for reasons other than credential loss, sometimes I need a password on a device where my password manager is not available (eg. a friend’s device).
2. 2.▲
   by pass_throwaway 4y ago

   Once that happens, a criminal could notice your password is more of a pattern than a full random password (of typable characters). But in order to do anything beyond hacking the single compromised account, the criminal would have to
3. 3.▲
   by pass_throwaway 4y ago

   The algorithm is considerably more complicated than that. Somebody would have to get ahold of several of my passwords (and the names of the services they lead to) to figure out my algorithm. For that to happen, someone would have to invest
4. 4.▲
   by pass_throwaway 4y ago

   I don’t use a password manager. Instead, I have a formula in my head to generate a unique complex password for each site or online service based on its domain name and some other optional parameters, if the site has password constraints (eg