If I need to login to your site less than once or twice a year, "Forgot my password" is my password manager. Personally, I feel that the utility of me working to keep and maintain that information in a database for high availability is essentially zero. As a result, I store very few accounts overall and checking out as "guest" hasn't been a problem of any sort. There's like 10 critical things that I feel the need to…
For websites I really don't care about, I just get a disposable email on dropmail, and copy paste the email address to both the email and password fields to save time. Surprisingly, some websites check this and won't allow you to set your password to your email, but removing the last character or adding a 1 at the end works around it.
Ask HN: I have 176 logins/accounts. How many do you have?
201–210 of 300 posts
Re: Ask HN: I have 176 logins/accounts. How many do you have?
#202Earlier quoted context omitted.
IIRC, Treasury.gov makes you enter your password by clicking buttons on a virtual, on-screen keyboard. Ugh.
They finally removed the virtual keyboard. Do you remember when it was a random layout virtual keyboard? Good times.
Since when? As far as I know they still have the virtual keyboard and it was never random. They used to have a random seed physical card.
Re: Ask HN: I have 176 logins/accounts. How many do you have?
#203Earlier quoted context omitted.
Agreed. This is utterly baffling question. You might as well ask me how many grains there are in my salt shaker. Interesting academic question, but seeing so many people climb on their soap box is wild.
i don't find it to be a baffling question. i think the unspoken part of this is "this is a really stupid system, someone ought to do something about it". i hope in the next 20 years that password managers are a thing of the past, but for good privacy-preserving reasons.
Wasn't the passkey article just front page the other day?
Re: Ask HN: I have 176 logins/accounts. How many do you have?
#204https://imgur.com/G7RUsYf
I'm running around 838 accounts because why not? I have a unique password for each login since five years ago. I went from LastPass to 1Password and finally settled on self-hosted Bitwarden(Vaultwarden) a year ago.
Re: Ask HN: I have 176 logins/accounts. How many do you have?
#2051146 in Bitwarden. But a lot of them are old, and some accounts aren't in BW.
> Obviously, anything with OAuth is "bundled" into my Google account.
I too used to live dangerously. But then I took an arrow... sorry, wrong one... then I read too many stories about "Google locked my account and now my life is ruined" and stopped using Google auth with anything but the least important sites on which I wouldn't mind losing the login.
Re: Ask HN: I have 176 logins/accounts. How many do you have?
#206$ pass | wc -l 321 17 of those are encrypted notes (API tokens, license keys, etc.). `pass` is a command line password manager: https://www.passwordstore.org/
% bw list items | jq length
494
Pass using git as its storage backend doesn't make a whole ton of sense for me. It's convenient enough for syncing if you use a public git host, but it's got a lot of unnecessary power. More than a few times I had to merge by hand when I had changes from both my laptop and my phone.
I use vaultwarden these days and it's pretty great. I wrote a (gross, ugly, but that's fine because I used it exactly once) thing to migrate from pass to bitwarden/vaultwarden, https://github.com/philsnow/pass-to-bitwarden
edit: forgot to mention, if you don't care about using Bitwarden the company for hosting, they have a somewhat generous free-forever tier https://bitwarden.com/pricing/
Re: Ask HN: I have 176 logins/accounts. How many do you have?
#2071249
Re: Ask HN: I have 176 logins/accounts. How many do you have?
#208The most infuriating auth-related thing for me is the companies that insist on doing phone-based 2FA. I'm inextricably linked to my specific phone number at this point in a way that previously was only an issue with my email address.
This. SMS 2FA has been considered insecure by NIST since 2016 [1] and it's a major pain when travelling and swapping sim cards. [1] https://www.theregister.com/2016/07/24/nist_says_sms_no_good...
I was thinking this with my health insurance website (which uses SMS 2FA), and I realized the problem is you can't expect your average Joe to know how to manage a TOTP 2FA correctly.
SMS might not be the most secure, but it's probably better than 1FA, and absolutely everyone can use it. Enter your number, receive text, boom.
Re: Ask HN: I have 176 logins/accounts. How many do you have?
#209I have around 40 2fa codes alone, number of accounts I don't even care to count.
find .password-store -type f | wc -l says 1248.
Re: Ask HN: I have 176 logins/accounts. How many do you have?
#210373