General / Off-Topic Any ideas for a Password system?

[Cmdr Mander]

My debit card was compromised yesterday but fortunately my bank automatically blocked it when a flurry of transactions, within minutes of each other, were attempted from different parts of the world.
It's obviously got me completely paranoid now about online security and although there's not much I can do about online retailers database security I can at least change my passwords to something less likely to be hacked.

Thing is, with pretty much everything online requiring accounts and logins it's unrealistic to have completely different passwords for every online account/forum/app without having a record of them somewhere, which sort of defeats the purpose. I'm not keen on using a third-party password manager as the paranoid in me says I'm still trusting information to someone else. I maybe completely wrong about that?

So, does anyone have any ideas for a password system which not only generates something less likely to be hacked but is also easy enough to remember and can be applied to the stupid amounts of logins we need in this day and age?

Cheers

 

[Remus]

I know the feeling.

Use leet code, or leet speak:

Leet speak — Wikipédia

fr.wikipedia.org

With it, its crazy easy to create complex passwords even with simple words.

Example :

Password => P@$5w02D

But remember, even with strong passwords, the best way to be safe in the net is to always be cautious as to where and what you are doing.

AKA, be careful where you click!

You can always check where a link takes you by dragging the mouse over the link WITHOUT CLICKING!

Try it with this link! http://wikipedia.com

This works with any kind of URL.

ALWAYS check before updating a software, you never know what the update might bring.

NEVER install a dubious software in your PC, always check and recheck.

Edit : most browsers nowadays can store all your passwords in a "secure" file. Personally I believe it is akin to put a box inside another box. I prefer to write all my passwords in a notebook. I still can loose it sure, but at least they are not compromised. And for someone to actually steal them, they will have to physically enter my room. Which is impractical.

I NEVER allow my browser to memorize my passwords. Better safe than sorry.

 

[Deleted member 257907]

I'm so paranoid I think the more security I use the more of of target it'll make me.
Like the hacker will see oh this 1 guy has a superhard to crack password he must have some juicy stuff on there. xD

 

[Cmdr Mander]

Edit : most browsers nowadays can store all your passwords in a "secure" file. Personally I believe it is akin to put a box inside another box. I prefer to write all my passwords in a notebook. I still can loose it sure, but at least they are not compromised. And for someone to actually steal them, they will have to physically enter my room. Which is impractical.

I NEVER allow my browser to memorize my passwords. Better safe than sorry.

That's a good point about not using browser password management, something I use but have never thought about.
The notebook thing is also a good idea. Definitely much safer than keeping a text file on my Pc (like I do now <facepalm>)

 

[Vetinari]

If youre in UK, get a Credit Card and use that for any online transactions. Never use Debit Card.

1. In cases of dispute or potential fraud or you basically tell them to - they have to block any transaction
2. In cases of dispute the CC company have to reimburse you NOW and THEY take the risk of fighting for the money with the fraudster - If Debit Card you lose the money NOW and have to fight to get it back.
3. If it all goes wrong - Your bank acct cant be cleaned out as not linked to Debit Card, you will have approx 4-8 weeks to sort it out with the CC company or Ombudsman and then only have to make minimal payment anyway until its sorted out and you get the money back (if Debit Card, acct cleaned out, Direct Debits bounce, charges from bank etc etc etc)
4. You get extra consumer protections as well but for me keeping my bank accts safe are a much bigger issue than if my CCs get maxed out fraudulently.

Passwords - if you must write them down use code only you know, swapping letters or numbers or backwards for example

eg Password123 could be written down as:

321drowssap - backwards + I know the 1st letter is capitalised.
Qassword123 - 1st letter up by one
Password234 - numbers up by +1
Pass Word - 0800 123 8866 (Phone number)

Or a combo but only you know. what you need to alter. This way many different or completely random passwords can be written down with a simple change to the initial letter.

I used to work at a company where I was forced to change my PW every month, with capitals and numbers. I did wonder what % of that months PWs were 'July2019' = sometimes the obvious security just makes it 10x worse.

 

[shreddog]

(What I do)
Never use the same password on important accounts.
Write down passwords with pen and paper...(notebook).
Make sure your passwords are not an actual word. This is easy to hack with dictionary attacks.
Make complicated passwords like H6x5Tr44P.
Oh, and don't write down your account name in the notebook.. Just write down the site name with the password. Memorize a common account name for all sites.

Use 2 step verification where possible.

For lower security, like forums and such, you can use a few common passwords.

 

[Remus]

Another level of security, if possible use a virtual keyboard.

 

[[VR] M4st0d0n]

I use Keepass.

Complexity of pasword has become increasingly useless.

-Edit- "Only size matters" and a joke was edited out by a mod. I'm sorry if the joke was offensive whatsoever. Of course size doesn't really matter. Except for passwords. The longer they get, the harder it's to decrypt. Sorry again.

 

[Patrick_68000]

I use 3-4 distinct and unforgettable passwords in my head, but no more.

So if I forget the password on a site, I try all 4.

 

[Phongsalt]

Consulting the fruits of the galactic forge's labours always confuses the hell out of me, i reckon that'd be a good place to start.

 

[[PS4] Lorenzo Waringos]

I've never worried about my bank account, it's the bank's problem, not mine. It's their systems and if they fail, not my fault.

As for passwords, one method I heard was to make a sentence and use the first letter of each word.

Elite Dangerous Is Doomed Because The Mining Doesn't Pay The Money Any More

EDIDBTMDPTMAM

You could get Fancy

3D1DBTMDPT£@M

 

[Patrick_68000]

I've never worried about my bank account,

You have good luck.

Don't say it too loud.

 

[Arry]

I use different passwords, for different zones, in my life. All totally random, but easy to remember. Silly things like. Iuse2h8temydog. Not real, but you get the point.

I NEVER let any system, remember my password.

I never use my phone, for any form of banking, or transactions of any kind. As these days, it is too easy for someone to sit at the side of the road and scan, anyone device, as they walk passed. A few years ago, I had a couple of things, added to my credit card bill and on the day in question, it never came out of my wallet; which I found quite scary. I called up the card company and they cancelled my card and removed the stuff brought from my bill.