I'm not moving from Authy.When I first moved over I had about 50 2FA accounts to move.
That must take you ages to get around the internet with all that copy and pasting.
has there been a password leak
- Thread starter teenwolf
- Start date
That must take you ages to get around the internet with all that copy and pasting.
Permabanned
- Joined
- 9 Aug 2008
- Posts
- 35,708
That must take you ages to get around the internet with all that copy and pasting.
It did! Luckily VaultWarden allowed to import via a spreadsheet.
Man of Honour
Soldato
Just write them all down on a bit of paper.
Make sure the paper is all white, 60 GSM, unbranded, made from spruces or firs and only imported from Germany or Sweden.
Permabanned
- Joined
- 9 Aug 2008
- Posts
- 35,708
and leave all the passwords inside the laptop so when you open it you can find them straight away on the piece of paper.
Man of Honour
or a place where nobody will look, under the keyboard if you use a PC like one of my colleagues does.
Commissario
Tape them to the bottom of a lamp, then when someone is in your house, having rendered you unconscious due to a load of alcohol and some barbiturates, they'll spot them, after having used that same lamp to search under desks, inside drawers, etc.
[/topical]
[/topical]
There won't be any breaches once Microsoft and Apple impliment their passwordless project.
No more passwords will be awesome.
They puncture your finger for blood DNA, finger prints and retina scans?
Permabanned
- Joined
- 9 Aug 2008
- Posts
- 35,708
Soldato
So being serious for a sec, if I dare. What's the best way to protect ourselves online? I have one hotmail address I use. Password is unique to only that, then I have the same username for almost everywhere else with one of three or four passwords I use. I let my phone or ipad takeover the password stuff where I can, but it doesn't always work but use a desktop at work so the password security is somewhat depending on which device I set it up on. I get constant warnings from my phone that my email and password have been detected in a datbreach for something where I have no financial links for. Like fitness apps and stuff like that. Obviously I have done nothing about this.
Best and easiest way? Granted it will be a bit of pain to do but dont mind paying a small subscription for decent security. Ta
Best and easiest way? Granted it will be a bit of pain to do but dont mind paying a small subscription for decent security. Ta
I hate Virgin Media's password policy for email accounts. It's not allowed to be longer than 10 characters, all of which have to be alphanumeric.
Reg reader rages over Virgin Media's email password policy - The Register
Soldato
Under the base of the desk lamp is another good one.
Permabanned
- Joined
- 9 Aug 2008
- Posts
- 35,708
I hate Virgin Media's password policy for email accounts. It's not allowed to be longer than 10 characters, all of which have to be alphanumeric.
Reg reader rages over Virgin Media's email password policy - The Register
I'm not with virgin so don't have that problem lol. I would have just set it to 10 then if it was their policy.
Competence. Unfortunately there is no fool proof security system. You just need pure competence. It is very easy to fall for phishing scams. Hyper awareness is key. Whenever you get a text/email to login to your email --- always open your own browser session to Hotmail.So being serious for a sec, if I dare. What's the best way to protect ourselves online? I have one hotmail address I use. Password is unique to only that, then I have the same username for almost everywhere else with one of three or four passwords I use. I let my phone or ipad takeover the password stuff where I can, but it doesn't always work but use a desktop at work so the password security is somewhat depending on which device I set it up on. I get constant warnings from my phone that my email and password have been detected in a datbreach for something where I have no financial links for. Like fitness apps and stuff like that. Obviously I have done nothing about this.
Best and easiest way? Granted it will be a bit of pain to do but dont mind paying a small subscription for decent security. Ta
People who claim they have been "hacked" have simply fallen for stupid phishing scams, or have a password that was exposed in plain text in breach. Once a password is exposed in plain text, it can be encrypted again - and therefore the hackers know what the encrypted password looks like and can reverse map it to the plain text. These are called rainbow tables...
Permabanned
- Joined
- 9 Aug 2008
- Posts
- 35,708
Maybe we need to change how email works so adding function for links e.t.c is impossible some how. Maybe it might happen once we move over to passwordless websites so passwords can't be breached.
Commissario
You're a prime example of someone who's very likely to be compromised somewhere, sometime.
And there we are, it's already happened.
Ideally you should use unique passwords so that if one system is compromised, the others won't be as well.
There are very good password managers, I use 1Password which is now cross platform. What you should do is log onto every single service you have signed up to and change the password to something unique.
I had a similar, if not the same, email but the link within pointed to :-
Code:
mailto:%[email protected]%3E;%[email protected]%3E?subject=unusual%20sign-in%20activity&body=Report%20The%20UserMicrosoft did flag the email spam though and plonked it in the junk folder.
Soldato
use a different username everywhere
use a different email everywhere
use a different password everywhere
use 2fa everywhere
use a different email everywhere
use a different password everywhere
use 2fa everywhere
Man of Honour
Pretend I'm 5 and explain to me how password managers work.
This is something I can't work out.