• @BroBot9000@lemmy.world
        link
        fedilink
        English
        55 days ago

        … Physically back up your passwords too.

        Every password in your manager should be written in a little book somewhere in case of exactly that. Keep it with your birth certificate and other important documents.

        Doesn’t take a rocket scientist to figure that one out.

        • @lemmyknow@lemmy.today
          link
          fedilink
          English
          34 days ago

          A PHYSICAL PASSWORD BACK UP??? Are you CRAZY??? What if someone gets ahold of my passwords? Just like that, unencrypted? I don’t live alone. There’s people around me that could find said passwords and access said accounts!!!

        • ColdSideOfYourPillow
          link
          fedilink
          English
          1
          edit-2
          3 days ago

          Almost all my passwords have a length of 10K characters, I am NOT writing all of them down.

          Also, forgetting the master password just isn’t in my threat model. It should be, but I just can’t care enough for that aspect.

  • Lka1988
    link
    fedilink
    English
    2
    edit-2
    4 days ago

    I finally exported all of my passwords from Firefox, Google, and iCloud, and dumped it all into my KeePass database (synced between all of devices via Syncthing - works very well). I’ve been slowly going through it, sorting entries not already in KeePass into their respective folders within the database (I’ve used KeePass since high school, I have a system 😅), deleting duplicates, and changing insecure passwords/adding 2FA as I come across them.

    After everything was imported to KeePass and backed up, I deleted all passwords from both accounts and turned off their password saving options. Also changed the “password autofill” option on my Pixel to Keepass2Android, so it’s now the only password handler on any device I own.

    Also filled the downloaded CSVs with random numbers and saved them, a few times, then permanently deleted them. No version history either.

      • @Junkers_Klunker@feddit.dk
        link
        fedilink
        English
        14 days ago

        Yea it was mostly meant as a joke, I do use a password manager and individual passwords for everything. My fiancé on the other hand, shes a lost cause, even though I did the complete setup for her she refuses to use it as it requires her to do something different (but I my opinion easier) than just typing the same password everywhere.

  • @Charlxmagne@lemmy.world
    link
    fedilink
    English
    1
    edit-2
    4 days ago

    Use keepassxc, bitwarden became proprietary a while ago, I ain’t letting my password manager do a lastpass and make me a vic of crippling identity fraud

    • @rockstarmode@lemmy.world
      link
      fedilink
      English
      44 days ago

      bitwarden became proprietary a while ago

      I’m interested in hearing more about this. I recall there being a mixup in packaging and people asked a bunch of questions about licensing. But as far as I can tell the client and server code is still available as open source (under various licenses) and the repos are frequently updated.

      This is an honest question, I promise. I haven’t found anything that points to regular users being pushed to anything proprietary, and no new discussions since late 2024.

      • @ipitco@lemmy.super.ynh.fr
        link
        fedilink
        English
        1
        edit-2
        4 days ago

        Afaik they pushed code that belonged to them and might not entirely be legal to compile yourself due to the code having a different licence. I believe they have 2 things now: the code is still open source, but a part of it is not free to use. The code can still be compiled by using different libraries and I think they support both but it was hard to understand so I don’t really know.

        Also the affected code wasn’t on a super important feature iirc

        I might be completely wrong though

        • SkaveRat
          link
          fedilink
          English
          14 days ago

          It was an accidental fuckup on their end that they fixed

            • SkaveRat
              link
              fedilink
              English
              14 days ago

              Iirc it’s about what it looked like at first, they just didn’t intent to (at least officially. Who knows if they just reverted due to the outcry)

              • @ipitco@lemmy.super.ynh.fr
                link
                fedilink
                English
                24 days ago

                Who knows if they just reverted due to the outcry

                That’s why it’s important to call out, even if it’s not a lot