I would like to comment on passwords security

That`s crazy, I always write them down, and mine are quite complicated. And I use 2 or even 3 ways confirmation wherever possible.

Another member told me about these.

Buy YubiKeys at Yubico.com | Shop hardware authentication security keys

Hello @frenchman96,

You will probably get a good response to this. There are many such threads here on the Forum.

Whatever method someone ends up using, it boils down to the fact that the User has got to Remember what the UserName and Passwords are, what they are used for, and where they are.

I have a throw away email account for maybe a one time Sign-Up and Sign-In.

Other than that, they are NOT only in my head, but are written down and put in a REALLY SAFE place.

My logic is, they are FAR SAFER in my house than on Password Software or the Internet. If your house was to get burgled, they will NOT be looking for that information, whereas if they are on the Internet, you have a world of potential hackers.

Just my thoughts.

I highly suggest you use a password manager like Bitwarden or Lastpass and 2 factor authentication. Yubikey is the strongest form of 2FA, particularly good for your Google account but many others too.

https://bitwarden.com/
#1 Password Manager & Vault App, Enterprise SSO & MFA | LastPass

I use the same password everywhere... it's: C'mon in, let's fight.

Just kidding.



The very first rule of internet passwords, is.... don't talk about them on an internet forum. ^^

frenchman96 said:

3- they also say, never write them down
3- as we are told not to write them down, best of luck-

I agree with the others. Write them down somewhere secure yet accessible.

I write mine in a password-protected Excel file that lives on a small USB stick that lives on my keyring.
I write down the password to the password-protected Excel file on a strip of paper that lives in one of those dog nametag cylinder things that also lives on my keyring.
The USB stick is never connected to my computer whilst I am connected to the internet.

Here's a [UK] link for some example ID tags https://www.amazon.co.uk/Pet-Barrel-.../dp/B00DEB1JVQ There are lots of available choices but I bought ones that, like these, have a slot in the bottom for me to swing off so I can be confident they won't come apart accidentally while I'm out & about.

All my passwords are, at least, 18 random characters long.
- I estimate that, even after taking account of possible technological advances over the next twenty five years, online hackers [who have often offered a 100 hours password cracking effort as their standard service] will only have a 1/1,000,000 chance of cracking such long, random passwords even if they dedicate a complete datacentre of 2 million PC-equivalents to the job.
- Hackers are more likely to be able to crack the host of a poor-quality online store of passwords such as a poorly-secured website. That's why it is important to use different passwords for each purpose.
- There's a 2015 discussion of this topic in the context of Office 2007 passwords at Office passwords - MSAForum

You might hear about 'Password reset disks' for Local user accounts [only]. They are an expensive alternative to a piece of paper.

Denis

I have probably 100 passwords. Don't you guys find a password manager so much easier?

See... if I was a hacker, you've all just saved me months of work.
I now know exactly where to start for each of you.

I know it seems silly, but these days a bad guy can set a bot to look for stuff like this on forums.

Kol12 said:

I have probably 100 passwords. Don't you guys find a password manager so much easier?

No, not all of us. This discussion has been had many times in TenForums.
- Some people like to use password managers whilst others prefer to use their own lists [such as my Excel list].
- I always read threads on this topic but have never reached any firm conclusion about which solution is the better one [bearing in mind that browsers include a degree of password management with their ability to operate 'Remember me' functions for websites].

If an overwhelmingly convincing case was put forward for using a password manager, I would take account of it but I do suspect that, since I've been satisfied with my current solution for so long, I'd take ages to make the time to do the changeover. Not a sensible attitude, I know, but it's probably what would happen in my case.

All the best,
Denis

Ghot said:

See... if I was a hacker, you've all just saved me months of work.
I now know exactly where to start for each of you.

I know it seems silly, but these days a bad guy can set a bot to look for stuff like this on forums.

So where are you going to start with me?

Denis