Security Recomendations for UserNames, SecurityQuestions, Passwords

Closed Thread
Thread Tools
  #16  
Old 06-10-2021, 07:08 AM
Mohawksin Mohawksin is offline
Senior Member
Join Date: Dec 2016
Posts: 123
Thanks: 383
Thanked 80 Times in 37 Posts
Default

Good humor. My gripe is that I'm told my logon/username OR password is incorrect. There is no clue as to which one or both.
  #17  
Old 06-10-2021, 07:11 AM
dewilson58's Avatar
dewilson58 dewilson58 is offline
Sage
Join Date: May 2013
Location: South of 466a, if you don't like me.......I live in Orlando.
Posts: 11,552
Thanks: 847
Thanked 9,751 Times in 3,627 Posts
Default

Quote:
Originally Posted by Mohawksin View Post
Good humor. My gripe is that I'm told my logon/username OR password is incorrect. There is no clue as to which one or both.
start with username........they will send to your email.
then reset password.
__________________
Identifying as Mr. Helpful
  #18  
Old 06-10-2021, 07:14 AM
GrumpyOldMan GrumpyOldMan is offline
Soaring Eagle member
Join Date: Jul 2019
Posts: 2,016
Thanks: 333
Thanked 2,477 Times in 753 Posts
Default

Quote:
Originally Posted by Mohawksin View Post
Good humor. My gripe is that I'm told my logon/username OR password is incorrect. There is no clue as to which one or both.
That is a good thing. If it told you which was wrong, it would also be telling the hacker which is wrong, significantly reducing the problem for the hacker, since it will know which is right and can focus on the other.

A good password manager will automatically fill in your user name and password on most (90%) of the logins you do, and on the others, it will show you what your password is. They are safer, inexpensive, and make life easier.
  #19  
Old 06-10-2021, 08:27 AM
JMintzer's Avatar
JMintzer JMintzer is offline
Sage
Join Date: Feb 2021
Location: No matter where you go, there you are.
Posts: 10,540
Thanks: 480
Thanked 8,244 Times in 4,279 Posts
Default

You should probably change your password... Worth the watch...

You Should Probably Change Your Password! | Michael McIntyre Netflix Special - YouTube
__________________
Most things I worry about
Never happen anyway...

-Tom Petty
  #20  
Old 06-10-2021, 08:44 AM
jimkerr jimkerr is offline
Senior Member
Join Date: Feb 2021
Posts: 493
Thanks: 143
Thanked 408 Times in 206 Posts
Default

I use a password manager called LastPass. It’s awesome. It works on Android, iOS and has plugins/extensions for your browser.

I often use the generate password option. It’s a really handy app.
  #21  
Old 06-10-2021, 08:50 AM
Pinball wizard's Avatar
Pinball wizard Pinball wizard is offline
Veteran member
Join Date: Feb 2018
Posts: 533
Thanks: 423
Thanked 320 Times in 139 Posts
Default

Quote:
Originally Posted by J1ceasar View Post
Better tip use caps and small letters . Use a non word . Use a password manager . Use Google add a number sequence to a silly word you know like the last 4 digits of an old phone you remember
Add special characters like a dash or asterisk. In between
Umbrella_3030
My_old_dogs_name_1700
Hot_wheel_1951
2001*fav+Movie

Or use the letters from a ryme . Mary Mary, quite contrary becomes MMqc. . get it?
Many of us probably had a word that we used the first 2 letters as the first part of their phone number. So if you phone number was NI(ghtengale) 1 -2345, a good password would be; Nightengale#1-2345.
  #22  
Old 06-10-2021, 09:09 AM
CFrance's Avatar
CFrance CFrance is offline
Sage
Join Date: Dec 2011
Location: Tamarind Grove/Monpazier, France
Posts: 14,480
Thanks: 388
Thanked 1,922 Times in 783 Posts
Default

Quote:
Originally Posted by GrumpyOldMan View Post
That is a good thing. If it told you which was wrong, it would also be telling the hacker which is wrong, significantly reducing the problem for the hacker, since it will know which is right and can focus on the other.

A good password manager will automatically fill in your user name and password on most (90%) of the logins you do, and on the others, it will show you what your password is. They are safer, inexpensive, and make life easier.
Can you recommend a good password manager for a dyed-in-the-wool Windows user?
__________________
It's harder to hate close up.
  #23  
Old 06-10-2021, 09:15 AM
JMintzer's Avatar
JMintzer JMintzer is offline
Sage
Join Date: Feb 2021
Location: No matter where you go, there you are.
Posts: 10,540
Thanks: 480
Thanked 8,244 Times in 4,279 Posts
Default

Quote:
Originally Posted by CFrance View Post
Can you recommend a good password manager for a dyed-in-the-wool Windows user?
Pretty sure Google Chrome has one...
__________________
Most things I worry about
Never happen anyway...

-Tom Petty
  #24  
Old 06-10-2021, 09:18 AM
retiredguy123 retiredguy123 is offline
Sage
Join Date: Feb 2016
Posts: 14,127
Thanks: 2,320
Thanked 13,588 Times in 5,185 Posts
Default

Quote:
Originally Posted by CFrance View Post
Can you recommend a good password manager for a dyed-in-the-wool Windows user?
I just list all passwords in a Word document that requires another password to open. Then, send it as an email attachment to yourself and store it in a separate email folder. So, I can always access it from any online device. But, my financial passwords are stored in my head. I have never used a password app, but my concern would be that I would become too dependent on it and forget my passwords.
  #25  
Old 06-10-2021, 09:22 AM
CFrance's Avatar
CFrance CFrance is offline
Sage
Join Date: Dec 2011
Location: Tamarind Grove/Monpazier, France
Posts: 14,480
Thanks: 388
Thanked 1,922 Times in 783 Posts
Default

Quote:
Originally Posted by JMintzer View Post
Pretty sure Google Chrome has one...
Thanks, but I don't use Chrome.
__________________
It's harder to hate close up.
  #26  
Old 06-10-2021, 10:39 AM
butlerism butlerism is offline
Senior Member
Join Date: May 2020
Posts: 203
Thanks: 0
Thanked 75 Times in 56 Posts
Default

Holy dating yourself.
  #27  
Old 06-10-2021, 10:53 AM
oldtimes oldtimes is offline
Veteran member
Join Date: Nov 2018
Posts: 982
Thanks: 156
Thanked 1,376 Times in 499 Posts
Default

Quote:
Originally Posted by CFrance View Post
Can you recommend a good password manager for a dyed-in-the-wool Windows user?
LastPass is one of the most popular ones.
  #28  
Old 06-10-2021, 11:16 AM
Tunesmith Tunesmith is offline
Member
Join Date: Nov 2020
Posts: 71
Thanks: 0
Thanked 23 Times in 17 Posts
Default

Quote:
Originally Posted by oldtimes View Post
LastPass is one of the most popular ones.
I've been using RoboForm for my passwords. At first, I just used the free version, but it didn't automatically sync passwords between all my devices. So I bought the more advanced version and that has been working great for syncing up any new or changed passwords with all my other devices. Go to roboform dot com, price for 1 year is about $24. Well worth it to remember 20-character randomly-generated passwords for you!
I just checked how long it would take to break a 20-character password that RoboForm generated. I used the "Use a Passphrase" link that was posted on page 1. The results for this password (BZfaUHBr.SJYGikf8393) was:
Approximate Crack Time: 31,167,128,343,915,984 centuries. Good enough for me.
__________________
Superior WI, Rapid City SD, Milwaukee WI, Mukwonago WI, Village of St. Catherine

Last edited by Tunesmith; 06-10-2021 at 11:29 AM. Reason: Update
  #29  
Old 06-10-2021, 11:41 AM
CoachKandSportsguy CoachKandSportsguy is offline
Sage
Join Date: Jan 2019
Location: Marsh Bend
Posts: 2,510
Thanks: 599
Thanked 1,898 Times in 913 Posts
Default And don't forget

Enable two step authentication for all major accounts, financial and cell phone

I have had friends have their cell phone go off when peeps trying to break in.
  #30  
Old 06-10-2021, 12:32 PM
Windguy Windguy is offline
Senior Member
Join Date: Jun 2016
Posts: 451
Thanks: 1,713
Thanked 679 Times in 246 Posts
Default

To help me remember passwords, I use lines from songs and use the first letter of each word, throw in special characters, numbers, and random caps. For instance, using a line from Yesterday (Yesterday, all my troubles seemed so far away), I might get: y-Amtss4a. That’s not long enough, but it serves as an example.

I used to work in a Dept. of Energy national lab. They had a project to test the security of all the labs. They sent infected CDs to random people at the labs and some people actually played the programs on them. This allowed them to get into the lab’s network. From there, my understanding is that they cracked passwords by encrypting all possible combinations of valid characters up to a certain length and created a table that they could search for people’s passwords. The more characters used, the longer it takes and the more storage it takes. It takes about 70x the effort/storage to crack passwords for every character more. Because I had a reputation as a power user, they targeted me and cracked my 8-character password. They were hoping I would have programs on my computer they could user to break into more stuff.

One day I saw my mouse pointer move without my assistance. I immediately disconnected my network cable and got a message saying the connection to a computer was broken. I later discovered it to be in Illinois. I called my support tech and our IS department went into action. Not knowing it was a test, I felt very guilty and wondered what I had done to get infected. I tried to clean up my computer and spent two weeks at it until they let me in on the secret. Then, they took my computer and destroyed the hard drive. I had to buy a new computer.

I later found out that I was the only one in all the national labs to catch them. I was just lucky to see them accidentally bump my mouse when I was using my computer. The fact that so many people put a random CD they got in the mail and ran the program on it did not sit well with DOE. After that, lab started testing us on a regular basis. About one in five people failed the tests.

I asked the people who cracked my computer how long of a password I should use. They said they could crack a 14-character password. I figured they were lying, so I changed mine to 16 characters. As this was over a decade ago, I imagine bad people can crack even bigger passwords with modern computers.

The moral of this story is to use long, random passwords. I highly recommend a password manager. I use Keeper and like it very much. It runs on all my computers and mobile devices and shares my passwords amongst them. I also strongly recommend you use two-factor authentication for your most important accounts.
Closed Thread

Tags
throw, remember, easy, financial, security

Thread Tools

You are viewing a new design of the TOTV site. Click here to revert to the old version.

All times are GMT -5. The time now is 04:04 PM.