It seems that you're using an outdated browser. Some things may not work as they should (or don't work at all).
We suggest you upgrade newer and better browser like: Chrome, Firefox, Internet Explorer or Opera

×
Community
General discussionHow to tell if your password is safe(61 posts)(61 posts)
(61 posts)
Pages:
1
2
3
4
5
This is my favourite topic
Posted June 13, 2018
avatar
nightcraw1er.488: Plus to that one. Keepass is a great little password manager. You can get it via portablapps.com as well, so easy to have on an encrypted pen drive and run on any machine without install. You only need to remember the password to the pen drive, and make sure you keep that safe then. Oh, and take a backup of your password database as well and store separately in case you do lose the pen drive.
avatar
Maighstir: I just downloaded the zip file of KeePass 2 off the official site and extracted to a folder on the USB drive on which I have one of the database copies, no need to bother with portableapps. With mono, the same binary runs fine on Linux and OS X (but I have the application installed on the machines I am the primary user, most of which run GNU/Linux-based systems). There are very few services I set my own passwords for, most are randomly generated by KeePass.
Yes, you can do that. Me I use portableapps for a lot of other software as well, so makes sense to plug that in.
Much like you I go for very long generated passwords, longer and more random the better.
Posted June 13, 2018
correcthorsebatterystaple and you're good to go.
Posted June 13, 2018
avatar
Maighstir: I just downloaded the zip file of KeePass 2 off the official site and extracted to a folder on the USB drive on which I have one of the database copies, no need to bother with portableapps. With mono, the same binary runs fine on Linux and OS X (but I have the application installed on the machines I am the primary user, most of which run GNU/Linux-based systems). There are very few services I set my own passwords for, most are randomly generated by KeePass.
avatar
nightcraw1er.488: Yes, you can do that. Me I use portableapps for a lot of other software as well, so makes sense to plug that in.
Indeed. Even the launcher works in Linux as well.
Posted June 13, 2018
avatar
Ancient-Red-Dragon: The only truly safe password is one that the user doesn't know.
It's funny you should say that as I;m going around with one of the softwares I have to use where they;ve removed the option to see what you're typing on the username and password. As someone with a tremour, if I can;t see what I;m typing, it sometimes takes a dozen tries to login. The company is defending their stance as a security measure. I;m responding what that up there.
avatar
muntdefems: correcthorsebatterystaple and you're good to go.
Reference in case that goes over anyone's head:

https://xkcd.com/936/

Unfortunately if you md5 hash that and go looking:

https://www.google.com/search?q=e9f5bd2bae1c70770ff8c6e6cf2d7b76

It's on a few lists. :)

For the hosting, we have an offsite SVN/ Trac install and the server passwords are on a wiki page there. Of course each of us have to log into each server with our own passwords first to get to the prompt to be able to do anything.
Post edited June 13, 2018 by drmike
Posted June 13, 2018
avatar
drmike: Unfortunately if you md5 hash that and go looking:

https://www.google.com/search?q=e9f5bd2bae1c70770ff8c6e6cf2d7b76

It's on a few lists. :)
Unsurprisingly.
Posted June 13, 2018
I simply use 12345, nobody ever guess that...
Posted June 13, 2018
avatar
toxicTom: I simply use 12345, nobody ever guess that...
i simply use "password", much easier to remember than a number ;-)
Posted June 13, 2018
avatar
toxicTom: I simply use 12345, nobody ever guess that...
Sounds like something an idiot would use on his luggage...

Edit: Oh shit, I see you already made that reference.
Post edited June 13, 2018 by paladin181
Posted June 13, 2018
avatar
muntdefems: correcthorsebatterystaple and you're good to go.
I was just coming to post this here:

https://xkcd.com/936/
Posted June 13, 2018
Never use a password on anything meant to stay secret. Use a password only on something not worthwhile keeping secret. Like a joke or a fortune cookie statement. In that way, a person who cracks the password will have something to smile about.
Post edited June 13, 2018 by thomq
Posted June 13, 2018
I always use "password" as my password, so when they tell me to write password I cannot forget! XD
Posted June 13, 2018
avatar
thomq: a fortune cookie statement.
... could actually be a pretty good pw.
Posted June 13, 2018
avatar
thomq: a fortune cookie statement.
avatar
toxicTom: ... could actually be a pretty good pw.
I hadn't thought of that.

That gets me imagining a movie scene where someone opens a fortune cookie from Chinese take-out to get the password for a secure system. I mean that would be how a secret agent receives the password, in a fortune cookie. But it'd still be a real fortune, like any other.

But then when trying to type it in it doesn't work the first time. Second time the agent is shown pressing the spacebar while typing it again, to emphasize the difference in the attempt, but that too fails. Then the agent presses the caps lock key and the light comes on, types it the third time (also with spaces) and it works. Because the fortune was shown to be written in all uppercase letters.

Not to say that ever happened in a movie. Just that I like the idea of such a scene.
Post edited June 13, 2018 by thomq
Posted June 13, 2018
avatar
BeatriceElysia: I have been thinking about running my passwords through those "how strong is your passwords" but I wonder "how safe those sites are".
Your passwords are only safe in a password safe :P. Pun intended, but it's what I've been using for ages - you only have to remember the master password for all intensive purposes and of course you have to carry around the app with you, but most of them also include a password generator and a cryptographic strength checker.
Posted June 14, 2018
Court rules no privacy for cellphone with 1-2-3-4 passcode
Pages:
1
2
3
4
5
This is my favourite topic
Community
General discussionHow to tell if your password is safe(61 posts)(61 posts)
(61 posts)