Your password strength

Forums › Off topic › Your password strength

1 | 2 | 3 | 4 | 5 | 6

TwoSeven

1624 posts

Uber Geek

Subscriber

#2240413 18-May-2019 11:10

One of the things that I often see is people equating human complexity for computer complexity.

Also, I would suggest that the best way to solve a problem is simply to not have the problem in the first place.

Software Engineer
(the practice of real science, engineering and management)
A.I. (Automation rebranded)
Gender Neutral
(a person who believes in equality and who does not believe in/use stereotypes. Examples such as gender, binary, nonbinary, male/female etc.)

...they/their/them...

GSManiac

489 posts

Ultimate Geek

#2240417 18-May-2019 11:18

TwoSeven: One of the things that I often see is people equating human complexity for computer complexity.

Also, I would suggest that the best way to solve a problem is simply to not have the problem in the first place.

So no password? Got ya! :p

OldGeek

899 posts

Ultimate Geek

ID Verified

Lifetime subscriber

#2240580 18-May-2019 16:04

I have adopted lastpass as my password manager. The process of logging onto sites for the first time, to get them into the lastpass vault, has been completed and I have started changing passwords to those generated by lastpass.

The only problem with this is that lastpass only works in Windows with logins through a browser. I had 'upgraded' the password for my Microsoft account and was stumped when I did a custom reinstall of Windows (to ensure a new and therefore clean registry). A core part of this is to set up your Microsoft account and in doing so there is no access to your lastpass vault (it has not been reinstalled yet). Luckily I had lastpass access through my phone, so could open the vault to get the lastpass-generated password. I am aware I could have used a local account for the install and upgraded it once lastpass had been reinstalled but this would have taken substantially longer.

So with password managers, ensure you have access to your passwords through at least 2 devices.

--

OldGeek.

Quic referal code: https://account.quic.nz/refer/581402

1024kb

1167 posts

Uber Geek

ID Verified

Lifetime subscriber

#2240598 18-May-2019 16:53

I was signing up for a Spark account when I came across the 10 character limit to user passwords. I put the brakes on right there & then.

So I tweeted @SparkNZ, asking why they choose to limit the password length & therefore level of security for Spark customer accounts. They ignored my question completely.

I simply won't do business with an organisation that's so cavalier about customer security. (Skinny don't have the password character limit)

Megabyte - so geek it megahertz

eracode

Smpl Mnmlst
8868 posts

Uber Geek

ID Verified

Trusted

Subscriber

#2240611 18-May-2019 17:19

GSManiac: I use Apple Keychain now to manage my passwords. I use to use the same 3 passwords for everything except my email which I would change every 72 days. Now I’ve been going through the process of changing all my passwords and allowing Keychain to suggest the new complex password. Hoping to have 100% unique passwords for all sites but annoyingly a lot of websites won’t accept the keychain generated passwords.

Up until six months ago I was in exactly the same position as you were - even down to having three PWs used for everything - except internet banking. Very lax.

Then I adopted Keychain for almost everything because all my stuff is now done on Apple gear. Works pretty well overall and I certainly feel a lot safer.

The only hassle is when you need to re-enter a password for something like Netflix on a TV screen - and you have to first look it up then enter 3 x 6 random numbers and letters using the TV remote - a bit of a PITA. So for a few of those I use shorter and simpler but unique passwords.

Sometimes I just sit and think. Other times I just sit.

nunz

1421 posts

Uber Geek
Inactive user

#2240658 18-May-2019 21:00

eracode:
GSManiac: I use Apple Keychain now to manage my passwords. I use to use the same 3 passwords for everything except my email which I would change every 72 days. Now I’ve been going through the process of changing all my passwords and allowing Keychain to suggest the new complex password. Hoping to have 100% unique passwords for all sites but annoyingly a lot of websites won’t accept the keychain generated passwords.

Up until six months ago I was in exactly the same position as you were - even down to having three PWs used for everything - except internet banking. Very lax.

Then I adopted Keychain for almost everything because all my stuff is now done on Apple gear. Works pretty well overall and I certainly feel a lot safer.

The only hassle is when you need to re-enter a password for something like Netflix on a TV screen - and you have to first look it up then enter 3 x 6 random numbers and letters using the TV remote - a bit of a PITA. So for a few of those I use shorter and simpler but unique passwords.

Keepass works on linux, apple, android, microsoft and auto types. It also has integrations with firefox etc.

There is also a web front end project if you need to access paswords in web only environmet.

I struggle with long passwords on android where no pasting is allowed but weirdly the keyboard has cache for auto type , holding last few clipboards that you can then auto type . chrome based tv and some android will let this work.

It is however a security hole so wipe the cache if you use this method.

1 | 2 | 3 | 4 | 5 | 6