I memorize all my passwords; they’re different but they all follow a similar format, so it’s not difficult to keep them all straight. There’s a couple variants of the format that I can cycle through when I need to change a password. The format involves the name of the service and a “salt” string, as well as some special character and uppercase/lowercase patterns. It’s quite nice to be able to keep everything in my he…
Ask HN: How do you manage your passwords in 2023?
71–80 of 179 posts
Re: Ask HN: How do you manage your passwords in 2023?
#72Re: Ask HN: How do you manage your passwords in 2023?
#73Earlier quoted context omitted.
Aren’t you using 1Password for generating one time passwords? Or do you deliberately want to keep them out of it?
I haven't been, but I should look into it. But the shared accounts that are my pain point only offer SMS OTP.
As for shared SMS, look into Google Voice. They automatically forward SMS texts to email as an option. I created a "shared" email account and gave my family access to that.
Re: Ask HN: How do you manage your passwords in 2023?
#74The biggest challenge with passwords was finding a tool for the whole family, which is more important than the most secure. If not, then it won't be used and we'll be back at the days of sharing "the family password" on everything. Yes, that password is on HIBP.
As a couple we have a shared vault that most things go into. We have equal access, she's a full admin.
As a family we have a shared vault for lower-tier things that the kids also need access to.
They all know to create passwords in 1Pass and save them into their vaults. It's not always perfect, but it's a great start. Generally we'll do 2FA within 1Pass, which is another weakness, but again, some 2FA is better than no 2FA, and OTP is vastly better than SMS.
Also saves a lot of problems with the kids (in this case ages 10+) not knowing their iCloud, Roblox, etc passwords. They're all saved, either of us can look them up.
The kids have had their accounts hacked and socially engineered, and also seen friends share their passwords which turn out to be their passwords to everything, and so get their more important stuff hacked (eg. as a teen their Snapchat seems pretty vital).
Overall 1Pass has a great security track record, their support has been friendly and useful, and I've had friends of friends I respect work their who are pretty trustworthy.
It's not the best app (but having used some others it's also pretty good).
Personally I have Yubikeys for 2FA for critical services that support them.
I also don't want to have to support this myself. Password access is pretty critical, and has a low SLA, must work. I've done on-call tech-support for over a decade, I don't do it at home. So, no home-hosted stuff.
Re: Ask HN: How do you manage your passwords in 2023?
#75Re: Ask HN: How do you manage your passwords in 2023?
#76I'm all in on Bitwarden at this point. It's the place where I keep all my credit cards, secure notes and about a 500 logins. A vast majority of these logins have passwords generated by Bitwarden itself. I'm confident even if BW goes down I can still recover my data since the vault works offline too. While the browser extension could use some UX work the mobile apps have been top-notch and sharing passwords with my sp…
I wonder which one is truly transparent (I work mostly on Mac/iOS but still need other platforms)
Re: Ask HN: How do you manage your passwords in 2023?
#77I roll my own. I use emacs on an encrypted password file stored on my local PC.
How do you keep the password file encrypted on file write and file open? Do you decrypt to the file system to a temp file first? Thank you
Re: Ask HN: How do you manage your passwords in 2023?
#78Re: Ask HN: How do you manage your passwords in 2023?
#79I use 1Password. It isn't perfect, but it's quite good. My big goal now is to come up with a better solution for 2FA that works for me and my wife's shared accounts.
i use 1password's built-in 2FA (TOTP), but only for a couple accounts as i find it unwieldy generally. i'm also keeping an eye on how passkeys develop over time.
Re: Ask HN: How do you manage your passwords in 2023?
#80I memorize all my passwords; they’re different but they all follow a similar format, so it’s not difficult to keep them all straight. There’s a couple variants of the format that I can cycle through when I need to change a password. The format involves the name of the service and a “salt” string, as well as some special character and uppercase/lowercase patterns. It’s quite nice to be able to keep everything in my he…
Are you not worried about compromising all your passwords when one of them is compromised? I assume attackers know they can replace the service name in a leaked password?