you are viewing a single comment's thread
view the rest of the comments
[–] 29 points 9 months ago (1 child)

Use a password manager. Use the longest possible password the site will allow. Create a passkey and store it in the password manager if the site supports passkeys. Enable 2FA.

It’s not about which characters you use, it’s about how long of a password you use. “correct horse battery staple” and all that.

  • source
  • hideshow 1 child comment
  • [–] 2 points 9 months ago

    Second the PWM, but use 2FA or passkeys with a set of duplicate Yubikeys instead. Even with just 2FA TOTP codes, they are stored on the physical key. I have 4 of them in different places all duplicated. I sleep soundly at night lol

  • source
  • parent