Do You Trust Your Password Manager?

[TromboneAl]

Not a solution for right now, but maybe later this year, a YubiKey for 2-factor authentication may be in my future now that they are going to be mFi certified.

https://www.wired.com/story/yubikey-lightning-ios-authentication-passwords/

At some point, you have to trust something, somewhere. Too many passwords to do otherwise.

Yes, I use a Yubikey for some accounts, and it works well. Still need passwords, though,

 

[TromboneAl]

Here's another instance in which trusting the password manager was not advised.

I signed up for mymedicare, and let LastPass create a complicated password that met all the stupid requirements (requirements make passwords LESS secure). I entered the data, but LastPass failed to save the password.

So, I had to go through the recovery process.

 

[TromboneAl]

PS And to sign up for Easy Pay, I need to snailmail something to St. Louis!

PPS And it can take 6-8 weeks to process!

 

[Likes_to_Lurk]

Here's another instance in which trusting the password manager was not advised.

I signed up for mymedicare, and let LastPass create a complicated password that met all the stupid requirements (requirements make passwords LESS secure). I entered the data, but LastPass failed to save the password.

So, I had to go through the recovery process.

I feel your pain. I did the EXACT same thing with Lastpass and the myMedicare website today.

 

[eroscott]

Here's another instance in which trusting the password manager was not advised.

I signed up for mymedicare, and let LastPass create a complicated password that met all the stupid requirements (requirements make passwords LESS secure). I entered the data, but LastPass failed to save the password.

So, I had to go through the recovery process.

I feel your pain. I did the EXACT same thing with Lastpass and the myMedicare website today.

There is a simply solution to this that I have used for a few years. When generating a password LastPass gives you an easy method to copy the password to your clipboard by just clicking on the link.

If it fails to create the popup then I just immediately logout of the site and log back in at the *right* login link (not a *registration* one). I then paste my password (Cntrl+V) and LastPass always seems to save/popup my login with the *correct* login URL.

This has worked great for me for a very long time.

 

[badatmath]

Yep, cause I don't have one. . . at least nothing commercial.

 

[Al in Ohio]

I use 1Password and have for about a decade now. I like its browser support for auto fill.