Realized my password manager was a single point of failure after a scare last Tuesday

Three years ago I started using a cloud password manager for everything, and last week my account got a suspicious login attempt from an IP in Nigeria. It made me think about how if someone got into that one account, they'd have access to my bank, email, everything. How do you all balance convenience with keeping your password vault itself secure?

3 comments

3 Comments

hannah_perry19d ago

dude this exact thing happened to a buddy of mine. he had all his passwords in one cloud manager and somebody got in through a phishing email that looked legit. they drained his bank account and locked him out of his email for a week. he said the worst part was watching his accounts get hit one by one and not being able to stop it. he ended up switching to a local password file on a thumb drive he keeps in his sock drawer. kind of a pain but he sleeps better now.

emery_black19d agoTop Commenter

oh man that sock drawer thing is so relatable though, like my dad keeps his wifi password on a sticky note taped to the back of his TV remote and calls it his "security system." honestly sometimes the low tech solutions feel more reliable because nobody's gonna phish a piece of paper. i mean it's not fancy but if it works it works i guess.

the_xena19d ago

The sticky note on the remote trick is honestly genius if you think about it. Hackers are out here trying to crack encrypted databases and your dad’s password is literally hidden in plain sight on a piece of paper nobody would ever think to look at. I tried doing the thumb drive thing like your buddy but I kept losing the dang thing. Found it in my fridge once next to the ketchup, still have no idea how it got there. Sometimes I wonder if my own "security system" is just me hoping I remember my passwords before my phone auto locks me out again.