Finally can't take it anymore
Downloads a Password Manager
Password Manager: "Please create a unique master password to begin"
1. Be civil
No trolling, bigotry or other insulting / annoying behaviour
2. No politics
This is non-politics community. For political memes please go to !politicalmemes@lemmy.world
3. No recent reposts
Check for reposts when posting a meme, you can only repost after 1 month
4. No bots
No bots without the express approval of the mods or the admins
5. No Spam/Ads
No advertisements or spam. This is an instance rule and the only way to live.
A collection of some classic Lemmy memes for your enjoyment
Finally can't take it anymore
Downloads a Password Manager
Password Manager: "Please create a unique master password to begin"
That's one password, and then use 2FA or a passkey or a yubinkey or anything to secure it so the security of the password isn't a big deal
Then go to every single thing you have a password for, and have the password manager set it to something random. I personally like pass phrases get it up in the teens of characters multiple words multiple numbers multiple special characters. 99.9% of the time you shouldn't be typing any of this in. It should be injected for you. If per chance you should need to type one of them in typing in four or five words some numbers and some special characters is not really a horrible grievance.
Who TF isn’t using a password manager in 2025? Like how would you even function?
EDIT: Y’all need to stop replying with your password generation strategies. JFC it’s like you’re asking someone to pwn your shit.
My employer, a fortune 500, blocks password managers and all other add-ons.
My employer, a 12 people big company, nowhere near any fortune list, mandates the use of 1password for all company related accounts.
Ah but you see there's the problem, you don't have a committee to launch a working group that puts together investigative teams to research and write reports on the benefit of the solution, the ROI of the solution, the training costs of the solution, stakeholder buy in of the solution, and potential alternatives to the solution. You need at least a 10 month process before one jackass says they don't want the solution so the committee can recommend to management that the solution be abandoned.
God damn, you sure you're not a politician?
Quick question friends:
If I'm already using bitwarden and decide to switch to self-hosting it; can I import my usernames and such?
I would most likely change all the passwords, but being able to migrate the websites (with corresponding username) would be kinda nice
You should be able to export and import all your logins as a file. I did this when i moved from lastpass to bitwarden a while back
Get a password manager. It's a lot more secure and easier to only have to remember one strong main password and have the rest randomly generated
For everybody commenting on passwords manager, I've been using one for years now and I feel this so bad. My company has a password policy of changing the LAPTOP's password every 8 weeks and you can't reuse any of the last 10 passwords used. I hate it because I can't use a password manager to unlock my laptop and I'm so used to password managers by now that it's getting really hard to come up with new passwords that follow the stupid requirements and even worse remembering them. I'm veeeery close to just start noting them down in a notebook by my machine and then send a picture to our security guy to show him where he has gotten us all to
I save it my password manager and can pull it on other devices. Still annoying, but not the worst. Honestly the worst is passwords with a character limit, and even worse when it's "small" like 16
Write a script that sets the password to 10 different passwords, then back to your original password.
You should do that unironically. The current best practices advises against frequent password changes for exactly that reason.
I do agree that's a particular case that can't be solved by a password manager. But it's all the more reason to use one elsewhere to reduce how many you need to remember.
I have to remember only 3 secure passwords. My personal computer, my work account, and my password manager. Those are the only three I have to type in manually. And because they're secure and unique, for stupid work password change requirements I just increment the last character.
!!! PASSWORD TOO WEAK !!! - your password must contains upper and lowercase characters, digits and symbols except not a hyphen for some fucking reason,, and no characters you've ever used in past passwords and no digits that are in your postal code, data of birth, or shoe size. Zalgo text is acceptable.
Store the passwords using KeePass; it is awesome, secure, and free. I've used it for nearly 20 years. Never once had a problem.
Bonus points if you use a comma for a special character, because I hear commas are a small inconvenience for hackers scraping usernames, passwords en masse. Fuck those guys.
Many (most?) password managers, including KeePass, have a feature to generate passwords directly in the tool.
Has to be 16 characters
So long as I can use more than that, I won't complain. I don't remember the service, but I definitely remember one where they wouldn't allow over a certain amount of characters and that was annoying because that was when I was still using repeat passwords back in highschool. My preferred password at the time was roughly 20 characters, but apparently that was too much because who cares about security, am I right?
It's even worse when they have a limit and don't enforce it consistently. I had to submit a bug report to my bank because I made a 24 character password at account creation but the login page only allowed 16 characters.
What painting is that?
Just add one to the number each time.
I'm on "[passwordiveusedforyears]22!" at work.
For otherwebsites I'm on things like "[passwordIveusedforyears][websitename]!"
Proper 2FA is secure enough for most people to keep using the same password so long as it hasn't been compromised. And a few things, like work passwords, email passwords, and bank passwords should be unique to thaspecific account.
Really, the biggest security hole is requiring logins for fucking everything. That's why there's a million password leaks. Why does a news website need me to sign in? Why do I need an account and password to order a pizza that I'm gonna pay for in-person?