ZDoom

yum13241 wrote: ↑Wed Jan 18, 2023 8:26 am The most important part of security is availability. If you can't remember the password, it's useless. I recommend BitWarden as a good password manager.

Chris wrote: ↑Wed Jan 18, 2023 1:45 pm

yum13241 wrote: ↑Wed Jan 18, 2023 8:26 am The most important part of security is availability. If you can't remember the password, it's useless. I recommend BitWarden as a good password manager.

I would avoid online password managers. People looking to get a bunch of passwords to crack will target them as they have many users, so just getting that one database will get passwords for many people and many sites. In fact, there's another site that had a recent deluge of spammers on compromised accounts, where it seems those accounts were using LastPass to store their passwords. That got hacked back in December, so it's open season on all those passwords and accounts. Doesn't matter how secure the password itself may be if it's stored somewhere that is a prime target for hackers.

Having a local password manager would be safer, since it then depends on your machine specifically being compromised (definitely not impossible, but online password managers will be juicier targets than some random person).

Graf Zahl wrote: ↑Wed Jan 18, 2023 12:49 pmAlso, since "security" has become so important I am constantly having problems signing into my accounts when I am away from home. The services see I am logging in from an unknown location and then try to contact me via means I cannot access because they ALSO want a 2FA which I cannot access because... So I'm stuck with this insanity that virtually forces me to carry around a smartphone all the time which I don't want to do because I consider smartphones the ultimately insecure devices.

CandiceJoy wrote: ↑Wed Jan 18, 2023 1:50 pm As long as the password manager uses a decent encryption algorithm and you use a good master password, it doesn’t really matter if they get hacked. Your master password is required to decrypt the data unless they’re using an algorithm so bad that it’s crackable without the master password, in which case you shouldn’t be using them

Chris wrote: ↑Wed Jan 18, 2023 1:58 pm

CandiceJoy wrote: ↑Wed Jan 18, 2023 1:50 pm As long as the password manager uses a decent encryption algorithm and you use a good master password, it doesn’t really matter if they get hacked. Your master password is required to decrypt the data unless they’re using an algorithm so bad that it’s crackable without the master password, in which case you shouldn’t be using them

I heard you like passwords, so I put passwords in your passwords. Then you use a password to protect your passwords, which itself then needs to be managed like any other password. That just seems to be kicking the can down the road, but worse, since now it's as if you have the same password for everything; once that one master password is hacked, all your other passwords are free for the taking.

yum13241 wrote: ↑Wed Jan 18, 2023 3:07 pm Google Authenticator doesn't let you back up your codes. Alternatives exist though.

Blzut3 wrote: ↑Wed Jan 18, 2023 5:04 pm

yum13241 wrote: ↑Wed Jan 18, 2023 3:07 pm Google Authenticator doesn't let you back up your codes. Alternatives exist though.

It does. They call it "transfer accounts" which gives a QR code you to import onto another device. Although it kind of implies it would with the name, they don't do the silly thing and auto delete the accounts from the source device so it's effectively a backup feature.