Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: What is your password management solution?

news.ycombinator.com

Post reply on HN
Print view View original

141–150 of 320 posts

Re: Ask HN: What is your password management solution?

#141

Post by uvatbc »

dheera wrote: post #80
microtonal wrote: post #63

Earlier quoted context omitted.

Disadvantages: - You have to keep track of n for every site. - If the master password is compromised, you have to change each password manually. - Not well-integrated with browsers. - Far less convenience on a phone.

> - You have to keep track of n for every site. I consider this far better than having to keep a password manager's database. n = 0 for the vast majority of sites without sensitive personal data. For the small handful that need to change, I usually sync them all to the same value of n about once or twice a year. > - Not well-integrated with browsers. I use Chrome's password-saving feature for websites that don't stor…

Re:Bluetooth I use AirDroid for this. It works as a vnc client not as a Bluetooth keyboard.

Re: Ask HN: What is your password management solution?

#142

Post by perryprog »

safeharbourio wrote: post #61
dewey wrote: post #12

1Password & gopass ( https://www.justwatch.com/gopass/ , it's "pass" compatible if you are using that already). I don't really mind the subscription service as it works fine across all platforms I use.

+1 for gopass

I'm confused — what's the difference of `pass` and `gopass`?

Re: Ask HN: What is your password management solution?

#143

Post by reality_hacker »

beckler wrote: post #77
retor wrote: post #56

Google passwords. I trust their engineering, it's free, passwords are accessible as long as I have a browser and it comes with Chrome. Negatives: I can't do backups, easily migrate to another supplier and it won't work automatically with other browsers. And it's Google (feels privacy invasive)

This isn't a really great solution, in my opinion. Anyone with access to your google account, or anyone with physical access to any of your synced devices could lift your passwords easily.

I think they ask your google password once again, when you try to access that functionality, even if you already logged in.

Re: Ask HN: What is your password management solution?

#145

Post by Royalaid »

6ak74rfy wrote: post #123
jzast2 wrote: post #17

https://www.lastpass.com Free to use, auto password generation, has an iOS app with thumb print unlock (saves you from typing in a long master password). I personally really enjoy it.

I don't understand the hate against Lastpass. Why would I trade it's awfully simple features (autofill on Android, automatically save/update passwords from website forms in browser, cheap etc.) for something like Keepass, even if the latter is purportedly a bit more secure? Some people also say that Lastpass's UI isn't great, but who cares about a password manager's UI as long as it does the job?

I use it but as others have mentioned it seems the browser extensions are getting slower and buggier

Re: Ask HN: What is your password management solution?

#147

Post by odammit »

All of my passwords are kitt3nZ!PIzZA837591&#! Which I simply copy and paste out of an iCloud Note.

I use HashiCorps vault running on a micro EC2 with a small API written around it. Then I access it using a CLI I built and a key pair.

Pros:

- I don't pay for a service (the ec2 instance was already running)

- I don't use someone else's software that is hopefully secure

- I got to play with Vault for an afternoon

Cons:

- I've probably done something wrong and I'll end up paying for it the hard way eventually

- I had to spend about an hour building something

Re: Ask HN: What is your password management solution?

#148

Post by rosser »

z1mm32m4n wrote: post #127
linsomniac wrote: post #122

Earlier quoted context omitted.

I used to do something very similar to this, for around 5 years. It works fairly well, but I've moved away from it largely because: There are always exceptions that won't work (you can't have one scheme that both satisfies "you must have one special character" and "you cannot have any special characters"), and it also doesn't let you change your password for a site. I was able to come up with something that worked in…

That's what the incrementing variable is for. Of course, you have to then remember how many times you've changed your password for any given site.

How does incrementing a counter address some sites requiring special characters while others reject them?

Re: Ask HN: What is your password management solution?

#149

Post by jasonincanada »

I rolled my own solution a couple years ago: https://gridpass.io/

Your master password is remembered visually, instead of as an arbitrary string. My contention is that you're less likely to forget specific spots on distinct images than an arbitrary sequence of characters. The method has worked perfectly for me since I began using it, but only one other person I know uses it, and it has NOT been audited or scrutinized by an expert in the field. Nonetheless, check it out. It's free, being more of an idea than a technology. Besides, I can't charge you for something you've stored in your own visual cortex!

Post reply on HN