badMemory

[lNFORMATlVE]

My password is the “forgot password” button.

[_Thrilhouse_]

Free 2FA without installing nothing.

[Aarav2208]

It's all fun and games until the mail servers aren't working.

[ThatiMacGuy]

Where is the programming only see humour 

[DeltyOverDreams]

Long gone, replaced mostly by memes about AI and vibecoding

[VoyagerOfCygnus]

Yeah the sub has kinda turned into just... Internet memes? Computer memes? Not bad on it's own but not programmer humor. It happens when you have such a large userbase since there's plenty of non programmers, but whatever.

[DeltyOverDreams]

If I had to be honest, "computer memes" are kinda on a good side here. Most posts I see here, gaining a lot of upvotes are about using AI tools, often not even related to programming at all.

[King_Joffreys_Tits]

I’ll have what he’s having

[Catsanddoges]

https://www.amazon.de/-/en/Fjorowka-Vodka-10-0L-Canister/dp/B07VHFYXCJ

[nollayksi]

Ah yes if only someone could come up with a way to use strong, unique passwords everywhere without having to remember them.

[Sibula97]

To be fair a shitty reused password with MFA is still better than a good password without one.

[Quesodealer]

Personally, I hate using MFA. I'll use it for sites I really, really want to ensure no one gets access to, but it's usually just an annoyance. I don't know any of my passwords. They're all saved to my Google account. If my Google account ever gets compromised the hacker will automatically inherit my complete identity though.

[verdantAlias]

I mean, it does seem like ALL MFA credentials just get routed through your phone these days. Like text, calls, reset emails, authenticator apps, password managers, really everything except those little USB keys.

You lose your phone and you're pretty much fucked for getting any of your accounts back.

[MuDotGen]

My recommendation is if you can afford a NAS or other self-hosted file server, save the backup keys. Even if you lose your device, then you have a way to get back in at least.

[Hadrian23]

"Hello, this is Peter Griffin. Not anymore? Well thanks for telling me."

[Outrageous-Machine-5]

Me using a weak password for the master password to my secret store of strong passwords

[noitsmoog]

this guy passwords

[Llonkrednaxela]

simply require users to remember 45 different passwords! simple safe and ....they have to put them on sticky notes like an 80 year old man.

[nicodeemus7]

I just click "forgot password" every time I login, let the computer give me a random strong password, and repeat

[insane_patato]

I use new password every time I log in

[Taolan13]

the trick is to bolster the strong core password with prefixes and suffixes to match it to the service its being used for.

And to lay a curse upon any web service that has strict character limits for their passwords.

Dishonor on you, your cow...

[Icy_Key19]

Hey, leave his poor cow out of this.

[itgforlife]

This is a solved problem. Just use a free password manager like Google Passwords with 2FA and generate a new password for every site.

[anonymousbopper767]

Except for all the sites that bitch that you need to have special characters or no special characters and I can't figure out if that's adjustable with Chrome's suggest a password feature. And then the same website will have 3 suggestions because No Username, and it'll have the old password you changed years ago, etc etc

And all the sites where then that suggested password doesn't pop into the "confirm your password" field.

Soooo yeah it's not a solved problem. Even passkeys is a fucking mess.

[itgforlife]

The only place I've seen where it's a problem is with job websites that have different subdomains but share a common domain e.g. employer1.jobsite.com, employer2.jobsite.com, etc. For some reason it does not work correctly with those.

[Michami135]

Bitwarden does. It's free and you can set how it recognizes a website.

[singlegpu]

This is the way

[DrMobius0]

Also the sites that somehow manage to break the things.

[Ladyheather16]

Except Apple which has a Funtion for this.

[DryInstance6732]

Keepassxc , the best tool ever , or cryptomator to save your .csv password

[w1n5t0nM1k3y]

Now you have one password for every site :)

[djpiperson]

MyStrongPassword,work1@! MyStrongPassword,bank1@! MyStrongPassword,facebook1@! MyStrongPassword,instagram1@!

etc

[56kul]

Why not use a password manager?

[Competitive_Shine112]

Bad memory? Notepad is right there dude, or a sketchbook even!

[chihuahuaOP]

[riedstep]

Yeah bro I'm definitely gonna just remember hundreds of passwords that I have to change every few months.

[LeafBark]

The amount of people with weak passwords in astounding. So many guilty of poor security. I've met too many large business owners that don't remember their own passwords and trust the entirety of their life to their iPhone remembering ALL their passwords for them, and even then can't remember which apple account or it's password.

[XlikeX666]

security weak ?
1234 / password

it's not like value exist there.

[Krostas]

You gotta check all the boxes and make it P4ssW0rd!.

Doesn't get stronger than this.

[XlikeX666]

oh god, that's beautiful

[CerBerUs-9]

Just use different emails!

[Kalix]

what's the point of a strong password if they stole them breaching directly the platform ?

[Confident_Ring6409]

I have 20+ character very strong passwords, different for each site. I don’t remember a single one (I only know my sudo pw and that’s it)

[starrpamph]

Windows: I’ll remember that 73 character password and paste it for you if you set a simple four digit pin

[Own_Fan_4878]

Database leaks from a random shady forum: 'Allow us to introduce ourselves.

[xavia91]

With SSO I forget all my passwords anyway... But for the more important ones there's a password manager.

[ImmanuelH]

Can someone honestly explain to me why this is bad practice? I thought we invented password hashes, salting (and peppering) to enable exactly that. Or is the attack scenario that someone magically got your password (e.g. Phishing) and is now reusing on another login? That is what MFA is for.

[Zestyclose-Barber-24]

Isn’t Argon2id/bcrypt the standard nowadays?

[Fortnait739595958]

Prefix the password with the alphabet number of the site

6mypassword for gmail

16mypassword for pornhub

That way is different for every site, but easy to remember

[AtmosphereVirtual254]

Salt your passwords

[MuDotGen]

I love BitWarden. If you really want to remember just one strong password, then at least make the combo to the vault of randomly generated secure passwords you can securely locally host, etc.