How to remember my password when they're like this

[Pray To Jesus]

Q46t9^yeYNvJ1B9xV#sw



tdI4%&h@bERVPt9%!nz7

 

[lxskllr]

You don't. You either write it down, or use a password manager.

 

[SKORPI0]

Q46t9^yeYNvJ1B9xV#sw



tdI4%&h@bERVPt9%!nz7

which site is this and what's the username?

Just write it down or txt file, cut and paste when needed to log in.

 

[mmntech]

which site is this and what's the username?

Just write it down or txt file, cut and paste when needed to log in.

AnandTech and Pray to Jesus. Hilarity ensues.

 

[sourceninja]

LastPass

Remember one password, have last pass log you into everything.

I don't know my passwords. I know my LastPass master password.

 

[postmortemIA]

LastPass

Remember one password, have last pass log you into everything.

I don't know my passwords. I know my LastPass master password.

LastPass CEO reveals details on security breach

 

[Jeff7]

Truecrypt container for all passwords.


Though I'd like to go smack Vanguard a few times. The password limit there is only 6-10 characters, and you're limited to the first 127 ASCII characters, so nothing fun like ∞.

That, in contrast to Treasurydirect.com, which has some ridiculous crap in place.
1) Enter account number.
2) A one-time password is e-mailed to you.
3) Enter one-time password.
4) Enter regular password with mouse using an on-screen keyboard.

Then, if you want to add or change your payment information, the only way is to fill out a PDF form, print it, and then mail it in.



I think they're trying to encrypt the website interface itself.

Soon the URL will be www.458dfg0bls%$%_sdfolœsdf►╡.com, which will present you with an array of 10,000 text boxes. You must enter your account number into the correct box in order to gain access to the next page, which will ask for your numeric password to be entered in a number base of their choosing.

 

[HeXen]

Q46t9^yeYNvJ1B9xV#sw



tdI4%&h@bERVPt9%!nz7

Looks like a password to River City Ransom

and back then....we memorized it

 

[xSauronx]

Truecrypt container for all passwords.


Though I'd like to go smack Vanguard a few times. The password limit there is only 6-10 characters, and you're limited to the first 127 ASCII characters, so nothing fun like ∞.

That, in contrast to Treasurydirect.com, which has some ridiculous crap in place.
1) Enter account number.
2) A one-time password is e-mailed to you.
3) Enter one-time password.
4) Enter regular password with mouse using an on-screen keyboard.

Then, if you want to add or change your payment information, the only way is to fill out a PDF form, print it, and then mail it in.



I think they're trying to encrypt the website interface itself.

Soon the URL will be www.458dfg0bls%$%_sdfolœsdf►╡.com, which will present you with an array of 10,000 text boxes. You must enter your account number into the correct box in order to gain access to the next page, which will ask for your numeric password to be entered in a number base of their choosing.

ouch

bank of america wants a username, then verification of a selected picture, then a password. i dont think theres a character requirement, but last i tried to change it you cant use special characters.

 

[jagec]

LastPass CEO reveals details on security breach

Well, damn. I have a pretty strong master password, but I changed it anyway.

/edit: D'oh, I should have looked at the date.

 

[imagoon]

LastPass CEO reveals details on security breach

Like everything, don't use stupid passwords on important stuff.

 

[arrfep]

Looks like a password to River City Ransom

and back then....we memorized it

BRJJOVD8H

Code from the GI Joe NES video game. Committed to memory 19 years ago...has not left my brain since then.

 

[Pray To Jesus]

LastPass CEO reveals details on security breach

yawn GL hacking my yubikey auth

 

[Ichinisan]

Sweet. I'm in.

Thanks for saving me from all the trouble I would have had to go through.

 

[OverVolt]

repetition.

 

[DesiPower]

LastPass

Remember one password, have last pass log you into everything.

I don't know my passwords. I know my LastPass master password.

This. /thread

 

[JTsyo]

Change it to something else

volumesphere4/3PIr^3

v0LuM3sPh3R34/3PIr^3

 

[Albatross]

With a password like that only praying to Jesus will help you remember it.

 

[Pray To Jesus]

With a password like that only praying to Jesus will help you remember it.

=D

Well those Passwords were generated by Lastpass as example.

I got a tons of those so right now I have no clue what the passwords are to my most important accounts.

Good thing I got LP locked down with 2 factor authentication with Yubikey so even if someone manages to get my master password (100% strong according to Lastpass), they couldn't do anything.

Never got any accounts stolen before, but better safe then sorry.

 

[Arcadio]

Change it to something else

volumesphere4/3PIr^3

v0LuM3sPh3R34/3PIr^3

Good tip. Thanks.

 

[aaksheytalwar]

Change it. Don't keep such passwords.

 

[sourceninja]

LastPass CEO reveals details on security breach

I remember that, it was really a non issue. My passphrase is very complex, I changed it the moment it happened and all my 'real' passwords were not leaked in the process. If you were really worried you can add on grid multifactor authentication and then they need physical access to your grid and your master password. You could also pay for a premium account and use a standard USB stick and Sesame or buy a Yubikey.

It's 'secure enough' for anything I have to protect. It's going to require getting my master password (which I change on a rotation) and getting my multifactor auth. It would be easier to hit me with a wrench until I tell you (Depending on the site it will take 0 to 1 hits)

Even if you got it, you would need to keep it because I also change the passwords on my critical sites on a regular basis just in case something manages to snoop on my web browser.

The only annoyance with this system is it makes ChromeOS a pain in the ass to use. I need to have another computer or phone nearby to get my google account password when I want to login.

 

[Zeze]

Q46t9^yeYNvJ1B9xV#sw



tdI4%&h@bERVPt9%!nz7

I'm pretty sure special characters are nowhere near worth the trouble than any combination of characters when it comes to breaking it.

 

[edro]

I remember reading an article about a long simple password was tougher to crack than a standard length with special characters.

Ex. "xt4!erY" is easier to crack than "mydogisfatandlazy"

I guess it depends on the cracker.

 

[sourceninja]

IMHO even harder to crack is a sentence of mixed language words.

"Cochinillo Asado is roast baby pig." as a password would be very hard to crack.

How many words in the password? Is there punctuation? Capital letters? What languages? Lots of variables.


Not to mention I'd hope most important software/websites are taking measures to protect you. Such as rate limiting login attempts, notifying you of failed attempts, and locking accounts in extreme cases.