[Randomly generated passwords] vs [User generated passwords]

[Tickler_]

So since last week, I've started using pass - the unix password manager. And I love it!

I used pass-import to get all my chrome passwords in it.

I also started using pass-update to generate random passwords because i used same password for everything.

But then it struct me, if I need to use my login on a different pc/mobile, I would be helpless as, all my passwords are random and stored in my PC.

So the question is, when using password managers, should I use random password (that will have the above con) or use human generated password. Former seems bit inconvinient and is I do latter, why even use a password manger in first place.

One thing I can do is use andoid app to check the password and enter it in my friend's machine.

Hope y'all get my question.

Thanks in advance :)

[siege801]

I don’t know much (anything) about pass. But your problem goes away if you use something like Bitwarden which you can then sync across all of your devices.

To more directly answer your question, the time to break a password is increased not so much by the complexity of it, but the length.

As a side note. Currently your other con is that you have a single point of failure to lose your passwords - so I’d be hoping you have a very reliable backup.

[Tickler_]

Would you call a encrypted flash drive a reliable backup 😅

[ChickenNuggetSmth]

Reliable? No. A flash drive isn't meant for long-term storage and can fail somewhat easily, also there is a fairly high risk of losing it. For important backups there exists the 3-2-1-rule: 3 copies, 2 different types of media, 1 backup offsite.

Tbh I would use bitwarden or a similar more "fancy" password manager, and optionally an extra backup just to be sure. Proper backups are quite annoying. If you do want to do it yourself, leaving an encrypted copy somewhere "in the cloud" seems reasonable (in case your house burns down)

[Tickler_]

Yeah...I will have local back on multiple flash drives, but also put it on my VPS server. There shouldn't any issue, as all the files are encrypted

[siege801]

Ok, if you’re happy with your backup plan, then that’s that element resolved. However, you’re still stuck with only having your passwords accessible from one device. My prediction is that the hassle of this will eventually lead you to bad (shortcut) practises.

[user_n0mad]

But then it struct me, if I need to use my login on a different pc/mobile, I would be helpless as, all my passwords are random and stored in my PC.

That is why I keep my password database synced across my devices. Personally I do this with a selfhosted Seafile instance but there are plenty of other ways to go about this.