Quote:
Originally Posted by Salty Dog
I use a cloud based password manager because I need to access my accounts from multiple devices. My master password is over 16 characters long. I have over 700 password protected accounts (I thought I had about 300, but just counted them). Granted many sites have no personal/financial info attached to the accounts. I've been changing my site passwords to 12+ characters, but it takes a while. I try to do several dozen every week or so. My password manager automates it somewhat, but site's security often makes using automated setup hard or impossible to use.
My Microsoft account is hit dozens of times a day from all over the world with attempted logins. Here are just 6 in 60 seconds.
7/9/2024 4:25 AM Unsuccessful sign-in Argentina
7/9/2024 4:25 AM Unsuccessful sign-in Brazil
7/9/2024 4:25 AM Unsuccessful sign-in Austria
7/9/2024 4:25 AM Unsuccessful sign-in Bangladesh
7/9/2024 4:25 AM Unsuccessful sign-in Iraq
7/9/2024 4:25 AM Unsuccessful sign-in Morocco
|
A 16 character password is far too short. Especially for the one that unlocks your entire online life. Add a passphrase. Example: Phrase you remember "I like to get up at 6 in the morning to go for a walk with my dog" ... becomes typed as... "Iltgua6itmtgfawwmd"
A 12 character password is hackable in minutes.
A password manager should be able to generate random 32 character (or longer) passwords for the entries. Who cares if they are impossible to type manually, the password manager should auto-type them for you.
There is a big difference between "cloud based" password managers and storing your data file in the cloud. The first maintains custody of your data file. That alone is insecure because you rely on them to do all your security, and hope they never mysteriously disappear or get compromised. When you have complete control where you store your data file, you can put it anywhere you want. Even in several places. The security built in to the data file encryption is 100% sufficient, and you can access it anywhere you can get to your cloud.