this post was submitted on 15 Sep 2024
462 points (99.4% liked)

196

16442 readers
2858 users here now

Be sure to follow the rule before you head out.

Rule: You must post before you leave.

^other^ ^rules^

founded 1 year ago
MODERATORS
 
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 3 points 1 month ago

Use that, but only for the handful of passwords that you

a) need to remember regularly, even when you don't have access to your password manager b) need to be really secure

I'd say email and banking are the obvious ones. For everything else, rely on a good (self-managed, open source) password manager. Sure, a passphrase beats any human-memorable password, but it doesn't stand a chance against my 250bit entropy machine generated passwords. And thanks to KeepassXC I never have to type any of them. And sure, you can secure your password manager's database with a passphrase, if you're so inclined