you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 9 months ago* (2 children)

Fyi. I keep all my user names and passwords in an address book. A physical one.

In my house. That is locked. In a drawer. Not sitting on the computer or near it.

Someone would literally have to break in physically, find the address book, and then flip through it to even realize what it was.

I also have codes for some user accounts. So instead of writing them out I give myself a hint as to which one I used. I generally use a variation of 3 ones. With different slight changes.

For my bank account access and the email account associated with it I only have hints. Not an actual user or email. So it can't be bypassed with a password reset.

These are both unique though and neither are the same as each other nor anything similar to all the other user name variants I use for other accounts.

  • source
  • hideshow 2 child comments
  • [–] 1 point 2 weeks ago (1 child)

    "wait until they come home, knock them out at the front door, and then beat them with this wrench until they tell us where the passwords are" 🔧

    Also every time I read someone using this strategy, I immediately think of 'but what if the house burns down'. You can guard against network access from your vault by it not being on the network, but that comes with different risks.

    Or if you want to get really paranoid, what about a state-level adversary that breaks into your home, records the entries in the password book, leaves with no trace, then uses it to login as you and monitor your activities, while you gleefully think that your online accounts are safe because they are in physical form.

    Just something to think about 💭

  • source
  • parent
  • hideshow 1 child comment