this post was submitted on 14 Aug 2024
588 points (96.5% liked)

Privacy

31799 readers
240 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

It is truly upsetting to see how few people use password managers. I have witnessed people who always use the same password (and even tell me what it is), people who try to login to accounts but constantly can't remember which credentials they used, people who store all of their passwords on a text file on their desktop, people who use a password manager but store the master password on Discord, entire tech sectors in companies locked to LastPass, and so much more. One person even told me they were upset that websites wouldn't tell you password requirements after you create your account, and so they screenshot the requirements every time so they could remember which characters to add to their reused password.

Use a password manager. Whatever solution you think you can come up with is most likely not secure. Computers store a lot of temporary files in places you might not even know how to check, so don't just stick it in a text file. Use a properly made password manager, such as Bitwarden or KeePassXC. They're not going to steal your passwords. Store your master password in a safe place or use a passphrase that you can remember. Even using your browser's password storage is better than nothing. Don't reuse passwords, use long randomly generated ones.

It's free, it's convenient, it takes a few minutes to set up, and its a massive boost in security. No needing to remember passwords. No needing to come up with new passwords. No manually typing passwords. I know I'm preaching to the choir, but if even one of you decides to use a password manager after this then it's an easy win.

Please, don't wait. If you aren't using a password manager right now, take a few minutes. You'll thank yourself later.

you are viewing a single comment's thread
view the rest of the comments
[–] zephorah@lemm.ee 19 points 2 months ago (2 children)

People are already annoyed at base that they need any 2FA at all and don’t want to deal with more info. They just tune out.

[–] Jessica@discuss.tchncs.de 10 points 2 months ago (3 children)

Tell them some password managers have TOTP support. I think I paid Bitwarden $10 for life or per year for TOTP so I don't need to use my phone.

[–] morrowind@lemmy.ml 5 points 2 months ago

That kinda defeats the purpose of 2fa though, if you use bitwarden for both

[–] umbrella@lemmy.ml 2 points 2 months ago (1 children)

whats that and how can i use it to get rid of 2fa?

[–] Jessica@discuss.tchncs.de 1 points 2 months ago (1 children)

Instead of opening Google authenticator or Authy or whatever your preferred 2FA is, you can take photos of the QR codes in Bitwarden mobile to store the TOTP codes in it, and then Bitwarden puts them on your clipboard to paste into websites

[–] umbrella@lemmy.ml 1 points 2 months ago (1 children)

you might have just inadvertedly sold me on bitwarden.

does it work with 3rd party sort of authentication apps? like when 2fa is inside the manufacturer app?

[–] Jessica@discuss.tchncs.de 2 points 2 months ago

It works as long as you can get at the authentication key that generates the one time codes. Usually you scan a QR code, but sometimes you have to paste it in as a string.

How you get that private authentication key can vary by service. For example, you can install steam mobile on an android emulator and use an open source program to extract the private authentication key.

[–] sudoroot@lemmy.zip 7 points 2 months ago

Yup, they couldnt care less about any 2FA. But then they get the surprised Pikachu face when they get breached after being phished lol.