We’ve all been there.

  • Doug [he/him]@midwest.social
    link
    fedilink
    English
    arrow-up
    0
    ·
    1 year ago

    By “emergency sheet” are you suggesting writing the access-to-everything password down somewhere? If so I’m hard pressed to think of many things less secure. If not I’m genuinely curious what it is.

    I can’t imagine a scenario in which I wouldn’t have backups, but I appreciate the mention.

    I also am generally not concerned with someone pickpocketing my house keys, but that’s not to say it isn’t a possibility. Awareness is the first step to mitigation.

    Email has to be the most protected, I absolutely agree. But I definitely wouldn’t be comfortable with the possibility of needing to reset everything else if I lost my master password. But I don’t know that I’m more comfortable with the ability to reset. It really kinda feels lose-lose to me.

    I don’t think we’ll move to passkeys any quicker or easier than we moved to 2FA. I’m glad we’re getting better options but we’re bound by the weakest links and they don’t like change.

    Thanks for the answers

    • Confetti@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 year ago

      Your usage of “secure” is very vague so I’ll clarify thats its the safest and most secure way to still be able to access your master password physically without it being leaked digitally thats the purpose of the physical emergency sheet. I’m suggesting this since I agree the weakest link is always the person first (memory and injury being the main culprits) then actual threats, but it should be stated your masterpassword should be something like a 6+ word, randomly generated passphrase so memorization shouldnt be a problem for the healthy, average joe imo. Keep the emergency sheet in a bolted down safe and/or somewhere offsite like a trusted one’s bolted down safe or a safety deposit box as a means to protect against burglary and fires. You can always limit what you want to put on the emergency sheet or even obscure it if thats a concern however, I would avoid that in case something happens to you and your loved ones need access to your account credentials, like your death for example. All your other point I agree with especially about the passkeys I really hope that takes off. Happy trails