Of course I’m not asking you to give away your passwords. But for those of you who have so many, how do you keep track of them all? Do you use any unique methods?
I know many people struggle between having something that’s easy to remember and something that’s easy to guess. If you keep a note with your passwords on it, for example, it can be stolen, lost, or destroyed, or if you make them according to a pattern that’s easy to remember, the wrong people might find them easier to guess.
I try to use passwords that look like sentences. For example you could “SpotifyIsAwesome!2024”. Easy to remember, hard to crack
Keepassxc remembers for me.
For cases where I may not have access to a password manager, I have a standard procedure where I’ll take the website url, add a fixed salt word, and run it through a hash function.
Either this is a common algorithm or you might be my friend who also does this.
hunter3for everything.You use 7 stars for your password?
They’re all the same-ish.
Let’s say my password is Token, but spelled like t0k3||
I would attach something related to the site on it, so if the site is lemmy for example, the password would be like
t0k3||Addictedtosurfing
If the site is Amazon something like
t0k3||Thanksformyfavoritejob
I called it “lock and key” style and I’d change the beginning part, the “lock”, once a year.
So next year it’ll be ef|=027Addictedtosurfing
These are examples lol
Pretty much this. But I used a function of the host name, so it would be easier to remember.
It gets annoying when the site forces you to rotate the password. After that happened a couple of times I started using a password manager.
Bitwarden and be done.
2 ways
1 password manager
- I use them very often. I have a bunch of different yes complex passwords that I’m using repeatedly throughout the day so brute force rote memory….
But yeah. Password manager
I don’t. Bitwarden and that’s it.
For passwords you have to keep in your head, diceware. Surprised it’s not already mentioned! Basically you roll dice to choose words from a long wordlist until you have 6 or 7 words.
Human brains are good at remembering words. It’s way easier to remember a password that looks like:
grandson estimator virtuous scabbed poet parasiticthan it is to remember a random character string.
I used to have a couple of letters from the site/service followed by an obscure dialectal word that’s not found in dictionaries with a few characters replaced by numbers and symbols. Those two letters kind of work like salting to keep every hash of my password unique.
Now I just do bitwarden.
I have a friend who resets his passwords whenever he connects. So he only remembers one password, that of his email. He claims it’s safer this way.
Theres… There’s something to it, I guess. Make sure your email is secure, and if not even you know your password, how can someone else. Christ, it sounds like a massive pain in the ass, though.
KeePassXC/DX.
I remember them two characters at a time.
Theres a couple of passwords I remember, like for logging on my PC and into my password manager
My passwords are unfortunately very… “patterned”. Makes remembering them easier though.
I use passphrases from movies of shows that I like. Then add a special symbol and a number that I like.
Thanks for nothing you useless reptile!61
This has 100.54 bits of entropy. I consider anything above 60 sufficient enough
I worked in IT at a company years ago that standardized on song lyrics in a similar fashion.
Similar, but I just take the first letter of each word, keep proper pronunciation, and turn some into numbers as appropriate.
Two trailer park girls go round the outside, round the outside, round the outside.
Becomes
2tpggrto,rto,rto.
No, for the record I do not use THAT song.
Wouldn’t it be better to use the full quote, with some random numbers and symbols interspersed?
Depends. I like this because it’s shorter, but still maintains a good level of security, and I’ll never forget it. Technically the full password is stronger, yeah. This also has the added benefit of someone being able to see you type it or catch a glimpse of it plaintext for some reason and have NO chance of remembering it.
Either way, they’re both pretty secure, I just don’t wanna type several lines of… Anything each time I log in.
