• Routhinator@startrek.website
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      1
      ·
      edit-2
      8 hours ago

      I’ve always loved Keepass, however I moved away from it in 2012 as it and any file based vault has brute forcing issues. You need to track every copy of it that has been made and if any copy falls out of your hands, like if you lose a device, you need to do a password rotation on 100% of your passwords. Since its a file, its not possible to prevent brute forcing.

      • GHiLA@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        1
        ·
        7 hours ago

        Consider the possibility that someone could get your database.

        It isn’t a safe. You can’t weld through the side of it and get in. You either make it ridiculous or impossible to get in.

        Use something memorable, but insane.

        My password is a three-line film quote with numbers in some of the places for letters.

        Haikus work great. Memorable, complex. Wrote it yourself? Even better.