513
God ****** dammit, here we go again (lemmy.world)
submitted 1 year ago by to c/technology@lemmy.world
166 comments fedilink hide all child comments
 

Use the "passwords" feature to check if one of yours is compromised. If it shows up, never ever reuse those credentials. They'll be baked into thousands of botnets etc. and be forevermore part of automated break-in attempts until one randomly succeeds.

you are viewing a single comment's thread
view the rest of the comments
[–] 46 points 1 year ago (9 children)

I assure you, the rare security issues for password managers are far preferable to managing compromises every couple weeks.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 9 child comments
    •
  • [–] [S] 17 points 1 year ago (8 children)

    I've only really been in one breach. This one is actually a breach of a "security firm" (incompetent idiots) who aggregated login data from the dark web themselves, essentially doing the blackhats' work for them.

    This is also EXACTLY why requiring online interactions to be verified with government ID is a terrible idea. Hackers will similarly be able to gain all possible wanted data in a single location. It's simply too tempting of a target not to shoot for.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 8 child comments
    •
  • [–] 11 points 1 year ago (3 children)

    I currently have 110 unique user+password combos. I wouldn't want to change all those even once, if I were breached and had used similar credentials everywhere.

    Bitwarden keeps them well managed, synced between devices, and allows me to check the whole database for matches/breaches via haveibeenpwned integration. Plus because I prefer to keep things in-house as much as possible, I even self-host the server with vaultwarden walled off behind my own vpn, instead of using the public servers. (this also means it's free, instead of a paid service)

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 9 points 1 year ago (2 children)

    For everyone else reading, bitwarden is an open source free password manager. The pro features are less password related and more about sharing access, file storage, and 2fa authenticator integration

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 5 points 1 year ago (1 child)

    Fair point.

    The self-hosting part was mostly about total control over my own systems and less about the paid features. It's very much not necessary.

    As far as pro features go, It was the TOTP authenticator integration that was kind of important to me. ~20% of my accounts have TOTP 2fa, and bitwardens clients will automatically copy the latest 2fa code into the clipboard when filling a password.

    Bitwarden will even tell you if a saved account could have 2fa (the service offers it), but it's not setup/saved in bitwarden atm.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 6 points 1 year ago* (1 child)

    Lucky you, I've been in at least 21 confirmed breaches so far.
    Which I don't really care about, as I've been using unique passwords and a manager for well over two decades now. 178 of them, currently. ...half to websites that probably died a decade ago.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 4 points 1 year ago

    If you think you've only been in one breach, you're probably mistaken or very young. I don't know how many breaches I've been involved in, but it's at least double digits.

    I'm American, and my Social Security number has been leaked multiple times. Each time I've done everything possible to secure my accounts (random passwords, TOTP 2FA where possible, randomized usernames, etc), yet there's always a new breach that impacts me.

    I'm not too worried though. My important accounts are pretty secure. I use one of the few banks (brokerage actually) that provides proper 2FA. My email and password manager use 2FA. My credit is frozen. Breaches happen, the important thing is to limit the impact of a breach.

  • permalink
  • fedilink
  • source
  • parent