Anyone experimented with Sign in With Ethereum?
Wallet based login and account management onchain.
Ask HN: I have 176 logins/accounts. How many do you have?
221–230 of 300 posts
Re: Ask HN: I have 176 logins/accounts. How many do you have?
#222I've got about 307 on KeePassXC, with the oldest generated password from 2016.
307 includes stuff like security questions as well though, so the answer to "What is your mother's maiden name?" tends to be something along the lines of "f+2Tng+DO?X).`W/7*5IQ_"
Re: Ask HN: I have 176 logins/accounts. How many do you have?
#223HN and a few forums, bank, email/cloud, website (which is really just storage for ancient stuff I have mostly forgotten but occasionally have a use for) and that is about it. I use guest checkout when ever possible and if I buy from a site which does not offer it I just close my account as soon as I finish checking out. I never made the switch to password managers and the like. I have all of my passwords memorized.
Re: Ask HN: I have 176 logins/accounts. How many do you have?
#224I'm pushing 600 in my main password manager, but most of them aren't unique — I just use "farce72$" by default since it hasn't shown up in HIBP (yet -- fingers crossed) and hits three of the major character classes, so it's pretty high-entropy. The password manager mostly serves the role of autofilling stuff in browsers.
In case anyone's wondering, it's not the HN password (with or without quotes) :)
I wondered if anyone would try that :)
Re: Ask HN: I have 176 logins/accounts. How many do you have?
#225Earlier quoted context omitted.
Similar, around 290 personal accounts. In addition comes the logins and such for various internal services like Home Assistant, PiHole etc. Total over 400 in my password manager. I keep wishing for something better. A great start would be to reduce friction, by having some standardized interop between browsers and a password manager. Like, my browser shouldn't know or care about passwords, it should just mediate the…
> some standardized interop between browsers and a password manager. Like, my browser shouldn't know or care about passwords, it should just mediate the authentication request to my chosen password manager through some standardized means. This way lies dragons. Browsers are among the most complicated software that most people run on their machines these days, and the number of bugs lurking in them is probably large.…
Well, the alternatives you mention are all prone to keyloggers or similar.
If you take say OAuth/OIDC, the only thing the browser needs is the token. It doesn't have to be involved in the authentication at all really, it just needs a token it can send as part of the requests.
Of course this requires that the site uses OAuth/OIDC, but hopefully that's where things are headed.
Re: Ask HN: I have 176 logins/accounts. How many do you have?
#226364
Re: Ask HN: I have 176 logins/accounts. How many do you have?
#227Re: Ask HN: I have 176 logins/accounts. How many do you have?
#228If I need to login to your site less than once or twice a year, "Forgot my password" is my password manager. Personally, I feel that the utility of me working to keep and maintain that information in a database for high availability is essentially zero. As a result, I store very few accounts overall and checking out as "guest" hasn't been a problem of any sort. There's like 10 critical things that I feel the need to…
problem is that sometimes these websites takes forever to send password recovery email.
especially if they use some sort of cheap cloud service to send email/sms, then it can take 15-20 minutes to receive password reset link
have you not encountered cases like these?
Re: Ask HN: I have 176 logins/accounts. How many do you have?
#229If I need to login to your site less than once or twice a year, "Forgot my password" is my password manager. Personally, I feel that the utility of me working to keep and maintain that information in a database for high availability is essentially zero. As a result, I store very few accounts overall and checking out as "guest" hasn't been a problem of any sort. There's like 10 critical things that I feel the need to…
problem is that sometimes these websites takes forever to send password recovery email. especially if they use some sort of cheap cloud service to send email/sms, then it can take 15-20 minutes to receive password reset link have you not encountered cases like these?
It happens. There's always a compromise to make depending on the hassle to reset the password.
Re: Ask HN: I have 176 logins/accounts. How many do you have?
#2301,413