What makes you think using your brain as your password manager of your choice is a good idea Jow Forums?

Yeah but you need a different one for each site. That gets burdensome no matter how easy something is to remember. Why on earth would you remember all those yourself when you can let the computer do it?

>and memorable even on other machines and if your password manager craps out.
So you make a backup of it, like you already have to do with all sorts of other stuff. You can copy or sync a password management database just like you do with all the rest of your files. Something blows up (not sure why it ever would, but whatever), restore it.

I really do not see why anyone would rather memorize dozens of mnemonic... things instead of doing something that's a.) this easy and b.) more secure.

Nah, get service specific and add some gibberish and you’ve fucked dictionary attacks and repeat use attacks, what 90% should worry about.

For example “Google’s poodle full o’ noodles” is an incredibly easy to remember, service specific, impossible to reasonably brute force, and snappy password

“Amazon scamazom grab a dog and BRAAAP” is in the same genre.

My toolchain’s crowded enough, theowing a password manager on top seems cumbersome and just makes my password system have a single point of failure, rather than some siloing

Until your shitty pwordman get haxed

>My toolchain’s crowded enough, theowing a password manager on top seems cumbersome and just makes my password system have a single point of failure
your brain is also a single point of failure

even when i do use my brain my fingers remember passwords better than the rest of my brain ever will.

Nah, I'm not retarded thanks. I will keep using a password manager which gives me actual randomness and fills out forms for me then use that spare brain power to memorize something useful. But you do you, whatever makes you feel raelly smrat.

The rules of passwords are:
>Never re-use passwords
>Don't use something that can be socially engineered (i.e. generate it randomly)
>Length is generally more important than complexity
>It should be easy to remember but hard to guess

All of this lends itself to using a password manager with randomly generated passwords, and having your master password be a 4-5 word passphrase (ideally with some other randomness thrown in).

You could argue that even you randomly generated passwords should be super long and contain large a character set as possible, but a lot of websites and other login systems place dumb restrictions on character set and length. So making sure your master passphrase is strong is the most important thing, followed by randomly generating passwords that meet the login system's criteria.

I have 70 passwords to fucking remember now. At some point using a password manager is just simpler.

It's also more secure in the real world in spite of the centralisation because it strongly discourages password reuse and weak passwords while stopping some keyloggers.

actually, website input keylogging is incredibly plausible now. Any JS library could contain keylogging software. I'm pretty sure clipboard """"support"""" is coming though.

Yeah, this is what I used to do before using a password manager. You know what though? Probably after several hundred incorrect password entries, and dozens of password resets, I realised it was simply faster and easier to use a password manager. It's about as fast as typing out those ridiculously long passwords too.

You look absolutely retarded in front of clients working professionally freelance and failing to login to some random service because you forgot the password.

SOME keyloggers.

I don't, once you go past a handful of passwords which frequently change, it's a pretty bad idea to keep them all in your head. Even worse when you get older.

SOME keyloggers being incredibly simple to deploy universally means typing in passwords is INCREDIBLY DANGEROUS. DO NOT TYPE PASSWORDS IN 2018. Clipboard support will make logging into anything also dangerous soon/now though.

Oh I'm derping and didn't understand what you were saying because I don't do any web dev.

>I have 70 passwords to fucking remember now
how many fucking accounts do you have?

6

>i can't remember 6 passwords
subhuman

that was a joke, 70 passwords for 6 accounts. I'd need a manager to count my accounts.

actually it is 70 password managers for 6 accounts. I need some extra security you can never be too careful.

Usually your email account is ALREADY somewhat of a single point of failure in regards to passwords.

There's not much to say about password managers. It doesn't matter how smart of an opinion you have against them. If you end up managing a shitton of passwords you will eventually say "fuck it" and install one because it will get really really fustrating to forget and reset passwords all the time.

The security argument against them is unconvincing in real world practice because trying to gather passwords from the perspective of a password cracker by going after peoples password databases if they aren't uploading them to the cloud is really really slow and retarded. Your average password cracker is going to do stuff like break into some shittily secured site and figure out peoples credentials and see if they reusing their passwords using bots. Or they're going to do phishing scams. Password Managers create a new vulnerability, but prevent you from getting attacked in ways that are far far more common in practice.

You guys are ignoring that the most common way password get compromised is through phishing. Even technically knowledgeable people, when they are prompted to be careful about phishing during a study, still fall for it.

A password manager will check the URL and certificates to make sure you're on the right site, while your brain will happily give up the password. No, you're not a special snowflake, you are vulnerable to phishing as much as the average technically knowledgeable person (and god knows most of Jow Forums is retarded).

hello it's nice to meet you :DD :D :DDD
just save it into notedad file and name it "NotApassword.jpg"