Live data from Hacker News

PasswordCard

passwordcard.org

21–30 of 31 posts

Re: PasswordCard

#21
post #3

This would be kind of annoying to pick that card every time I want to enter a password.. no? I Like To Take The First Word Of Easy To Remember Sentences. (iltttfwoetrs) and put some random i->1 and a->@ and o->0. This way, it's fairly secure and easy to remember.

See, that method never worked for me. How many easy to remember sentences are there where I know every word exactly?

Re: PasswordCard

#22
post #18
post #11

I started doing this a while ago. I have some keys to access a building which needs a security code to disable the alarm, so I wouldnt forget it I wrote it on the key tag mixed in with a series of other numbers. Alternativly I use KeePass to store all my passwords and for the master password I combined all the passwords Ive used over the years, so its about 15 characters long and easy to remember.

Same here. I save it on my dropbox account, just in case I needed access to my password when I am away from my computer.

Same. The KeePass iPhone app is very convenient when used in conjunction with the Dropbox public folder.

However, I will occasionally need to set a new temporary password for an online account when I do not have r/w access to my KeePass file. In this case, I tend to use the same simple password until I have the opportunity to change it, so the Password Card / Chart can still come in handy.

Re: PasswordCard

#23
post #22
post #18

Earlier quoted context omitted.

Same here. I save it on my dropbox account, just in case I needed access to my password when I am away from my computer.

Same. The KeePass iPhone app is very convenient when used in conjunction with the Dropbox public folder. However, I will occasionally need to set a new temporary password for an online account when I do not have r/w access to my KeePass file. In this case, I tend to use the same simple password until I have the opportunity to change it, so the Password Card / Chart can still come in handy.

1Password works well also.

Re: PasswordCard

#25
post #21
post #3

This would be kind of annoying to pick that card every time I want to enter a password.. no? I Like To Take The First Word Of Easy To Remember Sentences. (iltttfwoetrs) and put some random i->1 and a->@ and o->0. This way, it's fairly secure and easy to remember.

See, that method never worked for me. How many easy to remember sentences are there where I know every word exactly?

Well, you can choose sentence that are easier to remember.. It helps if that sentence is related to the website in question.. so for instance.. "I Like To Visit Hacker News" -> iltvhn.. I kind of type the password while saying the sentence in my head. However, as I said, I usually change i for 1, and a for @.. 1ltvhn. :p (Don't try this pass on my account please!)

Re: PasswordCard

#26
post #18
post #11

I started doing this a while ago. I have some keys to access a building which needs a security code to disable the alarm, so I wouldnt forget it I wrote it on the key tag mixed in with a series of other numbers. Alternativly I use KeePass to store all my passwords and for the master password I combined all the passwords Ive used over the years, so its about 15 characters long and easy to remember.

Same here. I save it on my dropbox account, just in case I needed access to my password when I am away from my computer.

yep, also store mine on a dropbox account, safe and secure.

Re: PasswordCard

#28

My personal password scheme is to string together a few random things. 2 or more random things I happen to be thinking about that day (often abbreviated weirdly to prevent having actual words in my password) with random special characters between them and/or at the beginning or end. This may not be as secure as a random SHA1, but it's so random (and usually pretty long) that I think it's pretty solid. One bad thing i…

You think it's pretty solid - but it may not be. Computers are fast these days - passwords even loosely based on real words and common substitutions can be brute-forced - so not saying your system is bad (it's probably what most of us do, more or less) - but this passwordcard idea seems equally valid - you are still free to use it however you want, and without physically obtaining it, someone would have no idea where to start. If they did physically obtain it - they'd still have to know how you used it (which is up to you) - and that's assuming you didn't add some other out of band information (which you are free to do).

Re: PasswordCard

#29
post #10

The problem I see is: it's still a bit complicated (i.e. too complicated for the "usual" folks). I see a lot of the security stuff failing for most people because it's just not easy enough. In this sense, Lastpass (passwords stored online) or Roboform (passwords stored locally) is imho better in that it makes it easy to use secure, one-time passwords for each website.

SuperGenPass is a bookmarklet which seems really nice - it has a different password for each website and 1 password that you use to create the different passwords.

Re: PasswordCard

#30
post #24

I use password composer ( http://www.xs4all.nl/~jlpoutre/BoT/Javascript/PasswordCompos... ) which does an md5 hash of the url and the master password of your choosing to generate a unique password for each website. The extensions for chrome and firefox make it very convenient to use.

If one chases down some of the links on that page, one gets to a number of interesting/useful resources.

Thanks for the link. I'd run across some of those some years ago but since lost the references.

Post reply on HN