Are password managers really safe?
 

I’m skeptical. Should I really put my whole financial life in the hands of Lastpass or one of the others? What if they get hacked? I’d like easier on-line security, but I don’t like the idea of handing the keys over to someone else.

look at keepass. program runs local, but the file'o passwords, you can keep on for example a usb stick. if super paranoid, you can encrypt the usb stick ala veracrypt et al. have two sticks to prevent possble loss or failure. walla.

Esel Mann is on point. I wouldn't store my passwords "online".
I store mine in an app that runs locally. (I only use LINUX Mint at home)

But I've always wondered: What happens to your password when you use it to get into your account on a web page?
- And how are "they" storing your password and details?

As it turns out I was right to be paranoid. Massive data hacks are very common.

I use and recommend Dashlane (for iOS)

You mean that post it note with all my passwords is not a good idea?

That's probably better than what a lot of online vendors are using to secure their data. lol ;)

This...

Can you dumb this down for us dummies..?
I assume that's what Mr Mann did but would love further clarity if possible..

I moved from Lastpass to Bitwarden.

You can self host.

if you are not using 2F everywhere you can then you are just asking for trouble whether you use a password manager or not

I write the password on the underside of my desk.

Password managers that save a local file are password protected and allow you to store usernames, passwords and URL in a local file. The nice thing is you can cut and paste the username and passwords into websites, etc. So you never have to see the password.
They can also generate passwords for you.

I like Keepass but there a several others that are free and local.

Years ago I used an Excel spreadsheet with "password to open" set to store passwords etc.

Never had an issue.

I have a "system" and just memorize them. Though my memory is "sharp", it's really not that difficult imo. Though it's also imbedded in other characters in the PW, if you don't know the serial # from my bycycle I had over 50 years ago .... good luck ;).

That's just one example fwiw.... make a longish sentence that meets all the "PW criteria", and is easy to remember if that helps.

I used dynamic PWs back in my latter corporate daze (FOB changed it every minute), for system access, so I'm not lax about security.... I've never written one down, nor stored them .... anywhere.

I have a Reynolds Wrap cap too :D

I'll move as well.

And, I know this means I already have issues, but what is 2F?

TIA.

In a word, no.

Seems to me like asking the used car salesman what the car on his lot is really worth.

Doesn't everyone use their pet's name + 123? That's why you never answer facebook polls/questions. They are all geared to pry data.

I got an email from Amazon over the weekend, they stopped a login from IP in Taiwan on a rarely used account of mine. Said they had the password. I suspect it was a breach from a different account.

I’m guessing it’s when you enter a password and they send you a text with a one-time PIN. .

Whatever password manager you use, do your survivors a favor, write down what it is, and how to get into it, and put that in a safe, or big box of financials documents.

My nephew recently died unexpectedly at 34 years old. He has a full business, and the many accounts of a web based guru. His parents still can't get into his phone or many of the accounts. His bitcoins may be lost forever.

^^^^ Good advice Glen. I haven't finished doing this, among some other things. All the pertinent info, docs, etc. will be in my safe .... that no one knows the combination (right now). Worst case .... a locksmith would be called... and "they" know that's the current plan. I will fix that too.

Ducks .... still not in a row ... not yet :D.

Worked great until I named my dawg Password :D