Do you use a password manager?

[libert19]

Last pass is the worst password manager ever.
I don't get how they have so many users,  even after their regular hacks. It will probably he hacked again within 2 years , just like in the past.
And they also have paid plans , so they make a lot of money

How can a bad product still have many clients? I think that you simply need to have constant promotion, use all possible tricks and of course minimize every possible hack to the extent that you call those who talk about it a minority that wants to harm the company.

The Ledger guys have the same problem, but they are still ubiquitous and probably have a lot of customers for their devices. In the end, it all boils down to the fact that the majority have no idea that something has happened, and the few who leave the "product" are very quickly replaced by some new clients.

I mean if one wasn't keeping up to date with news, he would not have even known about the hack, since the app was working fine as usual. Myself only stopped using it because there was tweet about people's crypto being wiped out and common link was that they all used lastpass to store their sensitive stuff.

[bitmover]

The Ledger guys have the same problem, but they are still ubiquitous and probably have a lot of customers for their devices. In the end, it all boils down to the fact that the majority have no idea that something has happened, and the few who leave the "product" are very quickly replaced by some new clients.

I think ledger problem is slightly different. They have a bad privacy , data leaks, etc, but their product was still safe until a few months ago.

I have an old ledger nano, which don't send the seeds to their servers. This is pretty good to me, and I am happy with my ledger. I can't say about the new devices, as I haven't researched if that cloud seed feature can be disabled..

Laspass on the other hand is very unsafe to use , which is basically what they sell, security

[Z-tight]

Right now i do not use any password manager, i write down everything, i have a place where i write down my passwords and other stuffs, but it is different from where i write out my seed phrases. I guess i should consider using an open source password manager, though my current method works for me and it has worked for me since the beginning.

[joniboini]

The Password* Manager feature that I use in the iPhone default application is not for storing seed phrases but for storing usernames/emails and passwords for access to certain accounts so that they can be automatically filled in when I want to log in. To open the Password feature, I set it using Face ID. Of course, I use other applications for accounts that use additional 2FA, and so far, I have used Authy.

I believe this uses an Apple account just like MacOS right? I also use them on my Macbook but I don't trust them enough to move all of my passwords over, not to mention I use other devices other than iOS/MacOS too. I also use Authy but I'm in the process of moving my OTP to FreeOTP and Aegis Authenticator. It takes a bit of time since they don't offer an export or backup feature at all.

[ABCbits]

The Ledger guys have the same problem, but they are still ubiquitous and probably have a lot of customers for their devices. In the end, it all boils down to the fact that the majority have no idea that something has happened, and the few who leave the "product" are very quickly replaced by some new clients.

I think ledger problem is slightly different. They have a bad privacy , data leaks, etc, but their product was still safe until a few months ago.

I have an old ledger nano, which don't send the seeds to their servers. This is pretty good to me, and I am happy with my ledger. I can't say about the new devices, as I haven't researched if that cloud seed feature can be disabled..

Laspass on the other hand is very unsafe to use , which is basically what they sell, security

It seems you partially proof @Lucius statement. There are other security issue besides Ledger Recover, such as supply attack which affect Ledger Connect Kit and several security vulnerability on their hardware wallet (such as side-channel attack on OLED screen).

But i agree Lastpass overall doing worse since they getting hacked regularly.

[Jating]

I don't use any password manager, maybe except Google Password manager, but it's some of the sites that I frequently visited but it doesn't related to any crypto sites or like in this community or in the other. I just do the old and traditional stuff of writing it down then I'm good. But I used 2FA on some of my accounts too, so I feel safe. Although I wouldn't be surprised if there are people who uses a password manager, they might have bad memories memorizing their password but there are downside on it obviously.

[Lucius]

The Ledger guys have the same problem, but they are still ubiquitous and probably have a lot of customers for their devices. In the end, it all boils down to the fact that the majority have no idea that something has happened, and the few who leave the "product" are very quickly replaced by some new clients.

I think ledger problem is slightly different. They have a bad privacy , data leaks, etc, but their product was still safe until a few months ago.

I have an old ledger nano, which don't send the seeds to their servers. This is pretty good to me, and I am happy with my ledger. I can't say about the new devices, as I haven't researched if that cloud seed feature can be disabled..

Laspass on the other hand is very unsafe to use , which is basically what they sell, security

If you start from the assumption that they, as a company, communicate honestly when they claim something, then you can believe that some of their devices are more secure than others - although it turns out that there is no evidence that their recovery feature cannot be implemented on all devices, including the old Nano S that you you probably think.

Don't get me wrong, I'm not saying that the Nano S is not immune to seed sharing, but Ledger always claimed that such a thing was not possible at all, and then it turned out that it was actually possible on some other models. This is about lost trust, exposing users to phishing, social engineering and possible physical attacks.

[Forsyth Jones]

I see that some people have commented that they write down their passwords on a piece of paper/notebook, even if it isn't online. A diary, notebook, or notepad that is hidden but unprotected is very dangerous, because someone in your home could have access to this notebook and see all your notes.

I don't think this is a good idea, since we have password managers like Keepass that save the database locally and encrypted.

[ABCbits]

I see that some people have commented that they write down their passwords on a piece of paper/notebook, even if it isn't online. A diary, notebook, or notepad that is hidden but unprotected is very dangerous, because someone in your home could have access to this notebook and see all your notes.

I don't think this is a good idea, since we have password managers like Keepass that save the database locally and encrypted.

If you worry someone in your home would read your book without permission, i think you might have bigger problem. After all, they could also steal your money or other valuable while you're sleeping or going outside home. And FWIW, you could find notebook or diary with PIN lock on some online shop.

[Lucius]

I see that some people have commented that they write down their passwords on a piece of paper/notebook, even if it isn't online. A diary, notebook, or notepad that is hidden but unprotected is very dangerous, because someone in your home could have access to this notebook and see all your notes.

I don't think this is a good idea, since we have password managers like Keepass that save the database locally and encrypted.

If you worry someone in your home would read your book without permission, i think you might have bigger problem. After all, they could also steal your money or other valuable while you're sleeping or going outside home. And FWIW, you could find notebook or diary with PIN lock on some online shop.

It all boils down to how much trust we have in the people we live with - but even if we trust someone, I believe that no one should be tempted to do something they shouldn't. What is important to us should be somewhere in a safe place, out of sight of other people, but also out of reach of pets like dogs, cats or hamsters.

Some small safe located in a hidden place would be a good solution for those who are not too paranoid.

[bitmover]

I see that some people have commented that they write down their passwords on a piece of paper/notebook, even if it isn't online. A diary, notebook, or notepad that is hidden but unprotected is very dangerous, because someone in your home could have access to this notebook and see all your notes.

I don't think this is a good idea, since we have password managers like Keepass that save the database locally and encrypted.

I don't think that someone in your home would be a problem.

The biggest problem here is convenience and security of those passwords.  They will probbaly be all the same or very similar, so if one leeks many accounts will be compromised.

Also, it is inconvenient to always go to that paper and look for your password. Also, you can lost the the paper ,then what?

You can't even properly backup because we change passwords more often then we would like and also create a lots of new accounts every month

[Z-tight]

I don't think this is a good idea, since we have password managers like Keepass that save the database locally and encrypted.

What about your seed phrase, do you store it in online password managers or don't you just write it down on paper, if you back up your seed phrase on paper, then you should have no problems backing up your passwords on paper or in a notebook too.

As for someone in your house, you are going to hide it and made it difficult for an intruder or even friends to find it.

[Forsyth Jones]

I don't think this is a good idea, since we have password managers like Keepass that save the database locally and encrypted.

What about your seed phrase, do you store it in online password managers or don't you just write it down on paper, if you back up your seed phrase on paper, then you should have no problems backing up your passwords on paper or in a notebook too.

As for someone in your house, you are going to hide it and made it difficult for an intruder or even friends to find it.

My seed/mnemonic is written down offline on paper, but it's encrypted.

As bitmover said, it isn't at all practical to store passwords on paper. In addition to having to leaf through them looking for the credentials, it is insecure by definition, because if someone finds your notebook, if it is a malicious person, your passwords have been compromised. How do you generate these passwords? Are they being generated randomly? Password managers solve this problem.

[Z-tight]

How do you generate these passwords? Are they being generated randomly? Password managers solve this problem.

I create my passwords myself, i use very long passwords, upper case, lower case, numbers and characters, this is how i create my passwords for most of my online accounts and then i back them up, i use one password per account, so i have not had any problems with that. I know open source password managers are great, but as of this minute, i don't use them yet, i should consider them i guess.

[ABCbits]

As bitmover said, it isn't at all practical to store passwords on paper. In addition to having to leaf through them looking for the credentials, it is insecure by definition, because if someone finds your notebook, if it is a malicious person, your passwords have been compromised.

I get your point. Although some notebook comes with bookmark, where you can use it to split it either by alphabet or category (e.g. social media, exchange).

How do you generate these passwords? Are they being generated randomly? Password managers solve this problem.

FWIW, you could use password manager only to generate the password and write-down it on paper.