Use strong passwords for your wallets/ accounts

[tranthidung]

In cryptocurrency, you will have to use many things such as cryptocurrency wallets (should be open source, non custodial) and exchange accounts.

Make sure you do as follows

• Use strong passwords for your wallets, accounts.
• Passwords must be unique. That means, Never reuse your passwords from one account to another, from one platform to another.
• Passwords should be generated randomly and not in any pattern of your own favorite.
• Use password manager tools if possible.

Some resources to learn about it.

• Are your passwords in the green?
• Haveibeenpwned.com. Check data breaches, whether your email address is in any data breach.
• How to create a strong password? Idea
• How to create a strong password (and remember it)
• Create a secure password

Password generators and management tools

• Keepass
• Keepass for Android
• Password Safe
• Proton Pass
• They can have password data breach too so be careful.
  
  • Notice of recent security incident (LastPass)

Creating strong passwords are good but not enough. Never store your passwords in online accounts (Dropbox, Google Drive, Azzure, Telegram, Facebook, ...). You will get nightmare some day if doing so.

[bitmover]

• Use password manager tools if possible.

I think this is the best advice which summarize all of them

I just switched to proton pass, I think it is very goof and privacy focused password manager
https://proton.me/pass

Password manager will automatically create one unique strong password for you in each website, and automatically fill up. I can't live without one anymore.

[tranthidung]

I think this is the best advice which summarize all of them

Password manager will automatically create one unique strong password for you in each website, and automatically fill up. I can't live without one anymore.

I can not disagree because if people manually create passwords, they will fall into similar patterns with small changes in characters and numbers. If one password is leaked, other passwords generated manually by that person will be more easily be bruteforced.

Password managers help to fix it, by randomly generate many passwords.

I just switched to proton pass, I think it is very goof and privacy focused password manager
https://proton.me/pass

Thank you for the information about Proton Pass. I added it to the list of Password managers in OP.

[hugeblack]

I have read some of the articles in the links, and some of them give incorrect advice, such as:

Using paid password manager: It is true that it has features such as encryption and others, but you still depend on a third party, and once it is hacked, all your money and accounts can be accessed, use opensource self-hosted one.

Sites like ---> Haveibeenpwned.com: Although they are good, they may record your data, so it is better to try to reduce sending emails, use the aliases emails feature^[1], and check the link before clicking on it.

Remembering the password: Whatever the method, remembering the password is a bad option. The best thing is to generate the password with seeds and save it on a piece of paper if you do not want to save the password digitally.

Finally, the security of your device is the security of your use. For example, if you used a strong password, copied it, browsed to an unknown site and it asked you for clipboard permissions, then a long password will not help you.

also, using an air gapped phone to manage 2FA apps and password manager will be useful.



[1] https://proton.me/support/addresses-and-aliases#:~:text=You%20can%20get%20a%20%2Balias,alias%20in%20your%20user%20settings.

[tranthidung]

Using paid password manager: It is true that it has features such as encryption and others, but you still depend on a third party, and once it is hacked, all your money and accounts can be accessed, use opensource self-hosted one.

I agree. Cryptocurrency enthusiasts prioritize open source stuffs so here you go. If you know other open source ones, please help me to make the list bigger.

Password Managers

|

Name

|

Open-source

|

Windows

|

MacOS

|

Linux

|

iOS

|

Android

|

Cloud

|

|

Proton Pass

|

Yes

|

Yes

|

No

|

No

|

Yes

|

Yes

|

Yes

|

|

KeePass

|

Yes

|

Yes

|

No

|

No

|

No

|

Yes

|

No

|

|

Password Safe

|

Yes

|

Yes

|

No

|

Yes

|

Yes

|

Yes

|

No

|

|

KeepassXC

|

Yes

|

Yes

|

Yes

|

Yes

|

No

|

No

|

No

|

Sites like ---> Haveibeenpwned.com: Although they are good, they may record your data, so it is better to try to reduce sending emails, use the aliases emails feature^[1], and check the link before clicking on it.

Similar to using blockchain explorers to check transactions or privacy score. Using them with Tor and be cautious with risk as well.

Remembering the password: Whatever the method, remembering the password is a bad option. The best thing is to generate the password with seeds and save it on a piece of paper if you do not want to save the password digitally.

I agree. That is the article title, I kept it unchanged but I did not recommend it.

[dkbit98]

KeePass is great open source password manager and you can use it offline on all devices.
It has random password generator and it can serve as temporary solution for storing 2FA TOTP codes.
I would not use Proton Pass yet, they released it recently and I think it uses cloud storage.

[joniboini]

I just checked Proton Pass and dkbit is right, they use cloud storage to store the encrypted password. Personally, I avoid any service like this regardless of how secure they claim their end-to-end encryption to be. The last time I used LastPass some of my data got leaked. Fortunately, I can still change passwords on key services that I use to avoid the worst outcome, but as long as the hacker still has the database he can probably try to brute force it anytime he wants to. I'd stick with KeePass and I suggest others to do so. There is no cloud backup to sync, but you can always make a backup with your flash drive or any offline storage basically. CMIIW.

[ABCbits]

Using paid password manager: It is true that it has features such as encryption and others, but you still depend on a third party, and once it is hacked, all your money and accounts can be accessed, use opensource self-hosted one.

I agree. Cryptocurrency enthusiasts prioritize open source stuffs so here you go. If you know other open source ones, please help me to make the list bigger.

How about KeePassXC? It has more feature than KeePass[1] with native Linux/Mac OS support.

[1] https://superuser.com/a/879013

[tranthidung]

How about KeePassXC? It has more feature than KeePass[1] with native Linux/Mac OS support.

[1] https://superuser.com/a/879013

+1.

Thank you for it.

[Jamal Aezaz]

In cryptocurrency, you will have to use many things such as cryptocurrency wallets (should be open source, non custodial) and exchange accounts.

Make sure you do as follows

• Use strong passwords for your wallets, accounts.
• Passwords must be unique. That means, Never reuse your passwords from one account to another, from one platform to another.
• Passwords should be generated randomly and not in any pattern of your own favorite.
• Use password manager tools if possible.

Some resources to learn about it.

• Are your passwords in the green?
• Haveibeenpwned.com. Check data breaches, whether your email address is in any data breach.
• How to create a strong password? Idea
• How to create a strong password (and remember it)
• Create a secure password

Password generators and management tools

• Keepass
• Keepass for Android
• Password Safe
• Proton Pass
• They can have password data breach too so be careful.
  
  • Notice of recent security incident (LastPass)

Creating strong passwords are good but not enough. Never store your passwords in online accounts (Dropbox, Google Drive, Azzure, Telegram, Facebook, ...). You will get nightmare some day if doing so.

Well Done OP. Very informative and useful post.. I am sure Newbies will find it very helpful. there are some links that even i didn't know. first time learned about https://haveibeenpwned.com/
Didn't know a website like that exist where we can search our email for data breaches. and I am shocked to know that my email was in 14 data breaches.
several of them are from Crypto related withsite such as BTC-alpha exchange. 
that is why it is important to never use same password in different websites. always generate a unique and complicated password for every website.

[Dr.Bitcoin_Strange]

In the crypto space, security is really a paramount thing that can decide the safety of an investor's fund. There are some people who actually did not take their security very seriously, but after facing some ugly situations, they were not told to be more security conscious.

Some years ago, I lost my funds because of my carelessness about my security, although I learned from my mistake and have not fallen victim to the security bridge. You have shared great information here, @OP, and I think it's wise for everyone to take their security more seriously.

[Gormicsta]

I agree with you, using a strong password for all this things is good because it can't be easily guess by another person, and it protects someone from be scam too even when they are with your phone.

[yhiaali3]

Yes, thank you for the important advice. The two most important pieces of advice from my experience:
First: Do not use the same password for more than one account, because having an account hacked will mean that all accounts will be hacked.

Second advice: Do not store passwords on the Internet, whether in the cloud or any other storage method, because they are vulnerable to hacking and therefore your data will be in constant danger.

Storing a password is similar to storing a seed. You should never use third parties to save it. It should be saved on paper in a safe place and not stored on a computer or the Internet.

[robelneo]

Storing a password is similar to storing a seed. You should never use third parties to save it. It should be saved on paper in a safe place and not stored on a computer or the Internet.

I'm using a password manager but I have a trick on my own on every saved password I just make sure before I hit save the password in the password manager I have inserted two characters in the beginning and also two characters at the end of the password that 4 characters I remember by heart, so even if there is a breach those passwords are useless as they need those 2 characters in the first and the last password I'm fully aware of those breach in the password manager so this is my own innovation to keep the all the password safe.

[KingsDen]

• Use password manager tools if possible.

I think this is the best advice which summarize all of them

I just switched to proton pass, I think it is very goof and privacy focused password manager
https://proton.me/pass

Password manager will automatically create one unique strong password for you in each website, and automatically fill up. I can't live without one anymore.

I have heard about this so many times even in the bitcointalk but I have decided to trust my memory for my passwords. I think I am over using my memory for something that isn't worth stressing it. It is time I started using a password manager and I can use the one bitmover recommends. Managing password manually is something hectic to do and I have taken the risk for a very long time
[/list]