If you're on this comm, you've heard this before. You've probably been putting it off. It's time to stop being lazy and just do it.

Pick one. There's Lastpass, KeepassXC, Dashlane, and Bitwarden.

Lastpass, Dashlane and Bitwarden all keep your passwords online, and allow you to easily login to sites with autofill. KeepassXC is the most secure option, and keeps your passwords locally on your device so they aren't stored anywhere else. I don't recommend KeepassXC unless you're really paranoid or need extreme levels of security, since the usability of having to sync your passwords manually is a hassle that's just not worth it for most people. Those first 3 are good, secure options. Take a look, and then pick one. Your password for your password manager needs to be unique, used nowhere else, and LONG. These are all non-negotiable requirements.

AND THEN ENABLE MFA (MULTI-FACTOR AUTHENTICATION]

This makes you need both your password and a second token, like a one-time code on your phone, to login. It's mandatory. Any important accounts that you have NEED to have MFA enabled.

Cool, now it's setup. Put in all the passwords that you remember, add the extension to your browser, and let sites accumulate in the password manager for a while. Then, go and change all the accumulated passwords to long, random strings generated by your password manager. None of your accounts should use any of your old, long reused passwords. None. It's very likely that they're compromised, and they shouldn't be considered secure.

Here's an example of why this shit is important.

  • Phillipkdink [he/him]
    ·
    4 years ago

    I don't get it. This is important because Trump's twitter account got hacked? Why is that important even? And I'm not the president of a republic I just shitpost on a leftist site.

    Like if you want to do all this I have no problem with you doing it, but why on Earth would it matter if someone hacked my chacha login?

    • invalidusernamelol [he/him]
      ·
      edit-2
      4 years ago

      This is more about Bank Account info. Stop using your birthyear as your PIN Patrick.

    • thomasdankara [he/him]
      hexagon
      ·
      4 years ago

      It was haha funny example.

      I was more referencing the first time his Twitter got hacked, which was because of password reuse. Researchers found his email in the LinkedIn password databreach, cracked the hash, and tried it on his Twitter account. Open sesame.

      This attack method is surprisingly easy to do, and extremely effective if you use the same password for everything, like you would if you didn’t use a password manager.