Read my (mostly) computing-related articles here.
09/09/23 - Forget Your Passwords10/08/23 - PGP KEYS CHANGED!06/08/23 - Switching To SVGs04/08/23 - Why I Switched Fontssf.cu > Blog > Technology
In this category, I post about my opinion and guides on technology.
09/09/23 - Forget Your Passwords10/08/23 - PGP KEYS CHANGED!31/07/23 - Tools I Use27/07/23 - Taking Proper Backups+ _______ _ _ _______ __ __ _______ _______ __ _ + |______ | | |______ \_/ |_____| |_____| | \ | + ______| |_____| | | | | | | | \_| ++ + +
sf.cu > Blog > Forget Your Passwords
+09 September 2023
1 min
+If you are trying to remember your passwords, you are doing it wrong. Trying to remember your passwords is absolutely fatal and has numerous disadvantages. To describe the demerits of trying to remember your passwords, here is a cycle that most people follow. You set a password. You forget it. You set a weaker password. And repeat.
+Eventually, people have passwords that are not only weak, but they also never change them unless they forget them. This leads to passwords that are short and easy to crack. Worst of all, people continue this habit on sensitive websites like finance or government services.
+The solution to this issue? As always, a password manager. You do not have to be an absolute genius to navigate around password managers or use them securely. Memorize a strong password system, not a lone password. Use the password system on your password manager and on accounts where you absolutely know that you will not have access to a password manager.
+"What password manager do I use?"
+ +Bitwarden is straightforward and intuitive. It is on the internet so it is less secure than password managers that are completely offline like KeePass. However, it is still much more secure than proprietary password managers like LastPass and NordPass. Everything is free (libre) and open-source software.
+KeePass, on the other hand, is much more advanced. It is completely offline, so you need something like Syncthing to sync it to all of your devices. This is my current setup of which you can read here. It is state-of-the-art. I generate 999-character passwords with extended ASCII so my passwords contain symbols like ©æ^ and much more. These passwords have entropies above 10000 bits. For reference, an 81-bit password costs about $1B to crack.
+All in all, you should stop remembering your passwords. The human brain is not designed for long-term storage. Let computers that are infinitely better than humans in that regard do the hard work for you.
+ + +10 August 2023
1 min
I forgot the passwords to my PGP keys. PLEASE DO NOT USE MY OLD PGP KEYS TO SEND ME EMAILS!!! I did not make a revocation certificate as well which is a bad mistake. I have learned my lesson to say the least. Please use my new PGP key over here.
- +