• fartsparkles@sh.itjust.works
    link
    fedilink
    arrow-up
    58
    ·
    1 year ago

    Never re-use a password between services; every password for every system should be unique. Use a “password manager” to help.

    Enable two-factor authentication (2FA) / multi-factor authentication (MFA) on any platform/service you can. It makes logging in a little longer but it makes these kinds of attacks much harder to pull off.

    • deft@ttrpg.network
      link
      fedilink
      arrow-up
      2
      arrow-down
      6
      ·
      1 year ago

      If it is data someone can get it.

      I do not know the solution. In a few years password managers will be seen as bad things, it’s a collection of all your passwords ffs how is that really any safer?

      • Cethin@lemmy.zip
        link
        fedilink
        English
        arrow-up
        6
        ·
        edit-2
        1 year ago

        If it’s stored locally, has a strong password (it should be a very strong passphrase. I don’t know how long mine is, but more than 40 characters), and is encrypted (which any good password manager should be), then it should be fine. I don’t see any issue, at least not a reasonable alternative. Now using a password manager service that you’re trusting with your data probably isn’t a great idea.

        I use KeepassXC. It’s free and open source. The android app I use is KeepassDX, though there are others, and I use Synchthing to synchronize changes between devices.