Hacker News new | ask | show | jobs
by autoliteInline 1733 days ago
In terms of passwords, I just have them written down in a file that I print out in a desk drawer and keep a copy of in my email.
1 comments

For anyone tempted to do likewise, this is extraordinarily bad advice.

A hardcopy of your passwords is fine. Preferably one you've written out by hand.

An unencrypted online file is an extraordiarily bad idea. This puts your secrets where they're readily accessed and exfiltrated.

My own preference runs toward passphrases (based on random word selection) for secrets I've got to remember, and very long random strings for anything else, managed in a password manager or encrypted file.