I would do the word jumble suggested by xkcd, but so many websites require numbers, special characters, and disallow spaces that it would be impossible to remember unique passwords between those sites. Ironically I end up in a much weaker password ecosystem because I re-use the nearly-same password over and over again so I’m not constantly requesting a reset.
Single point of failure and a separate entity has all of your passwords and you have to continue paying them or lose access to everything. Sounds like a terrible idea to me
There are password managers you can self host. Bitwarden being one of them. Secure it as much as you want and keep off-site encrypted backups if you’re worried about a single point of failure.
there should be a keepass+syncthing package available for normal people to use, i put keepass and syncthing on all my devices and that means I don’t have to host a server while always having my password vault synced
Or do the sensible thing and minimize how many accounts you make on various sites because they’re bullshit, which also has the added benefit of giving you a small enough number of accounts that you can remember the passwords
I would do the word jumble suggested by xkcd, but so many websites require numbers, special characters, and disallow spaces that it would be impossible to remember unique passwords between those sites. Ironically I end up in a much weaker password ecosystem because I re-use the nearly-same password over and over again so I’m not constantly requesting a reset.
Why not use a password manager?
BitWarden now supports passkeys and has a free 2FA app.
No excuses not to be as secure as possible anymore.
I’m split between a work pc, mobile, and home pc… It could work for 90% of cases. I never trusted a password manager though.
KeePass doesn’t rely on any third party, and if you choose to use a third party file storage to hold your password vault, it’s encrypted
Single point of failure and a separate entity has all of your passwords and you have to continue paying them or lose access to everything. Sounds like a terrible idea to me
There are password managers you can self host. Bitwarden being one of them. Secure it as much as you want and keep off-site encrypted backups if you’re worried about a single point of failure.
Ah, yes, because self hosting is feasible for everyone
/s if that’s not obvious
there should be a keepass+syncthing package available for normal people to use, i put keepass and syncthing on all my devices and that means I don’t have to host a server while always having my password vault synced
You’re right. It’s better to just not use a password manager and use the same password on every site you go to.
/s if that’s not obvious
Or do the sensible thing and minimize how many accounts you make on various sites because they’re bullshit, which also has the added benefit of giving you a small enough number of accounts that you can remember the passwords
“just don’t use the internet” is not the hot take I was expecting