What your idea to remebr your many passwords?

[Zeeeeks]

It is.  You have to have the head for it all...

I guess I wouldn't qualify 

[AsherO]

It is.  You have to have the head for it all...

Or Post-It notes pasted to your monitor

[springles]

That could be a lot of usernames and passwords to remember.

For the most part my username is one of two that I use and my password is one of four.  I generally get it right on the first try but definitely by the 3rd.

[SuperFlyer]

Ashero is right, the requirements for passwords are different. Some place you have to choose 4 digits, where others minimum 8.

I think I got ashero with his system.

He builds one complicated password, say ash#ero*5. But the number 5 he would replace by other numbers on other accounts.

[AsherO]

He builds one complicated password, say ash#ero*5. But the number 5 he would replace by other numbers on other accounts.

That wouldn't fit what I said. If you saw my password to a few sites and I didn't explain the pattern, you would never guess it. Once I explain it, the pattern seems obvious.

[elikay]

I don't feel safe trusting a website to keep all my passwords (all it takes is one hack...) most I remember (I have a couple I ussually use) and if I can't guess then I reset... And for those thinking evil... my DDF password will not get you access to ANYWHERE else, its one of the few sites that I didn't reuse the password for (just because its a relatively new signup).

[AsherO]

I don't feel safe trusting a website to keep all my passwords (all it takes is one hack...) most I remember (I have a couple I ussually use) and if I can't guess then I reset... And for those thinking evil... my DDF password will not get you access to ANYWHERE else, its one of the few sites that I didn't reuse the password for (just because its a relatively new signup).

With my password system, I have five 'layers' (tiers, using a separate sub-system). One for sites I don't really use an account on, then for forums/blogs etc. then for sites that have my CC on file (e.g. e-commerce sites) and lastly one (super-secure) layer for sites that have info that really needs to be secure (ssn, banks etc.). I also have a separate one for email, in-case you want to use that to reset my passwords elsewhere). This way even if you break one of my systems with less secure sites, the more secure data is likely to stay safe.

[myb821]

With my password system, I have five 'layers' (tiers, using a separate sub-system). One for sites I don't really use an account on, then for forums/blogs etc. then for sites that have my CC on file (e.g. e-commerce sites) and lastly one (super-secure) layer for sites that have info that really needs to be secure (ssn, banks etc.). I also have a separate one for email, in-case you want to use that to reset my passwords elsewhere). This way even if you break one of my systems with less secure sites, the more secure data is likely to stay safe.

seems a little paranoid to me

[Chaikel]

seems a little paranoid to me

It ain't paranoid if someone is out to get you

[AsherO]

seems a little paranoid to me

No, just secure.

I'm not that paranoid, I actually trust AwardWallet and Yodlee with many of my accounts' passwords (I think both those sites store hashes).

[myb821]

No, just secure.

I'm not that paranoid, I actually trust AwardWallet and Yodlee with many of my accounts' passwords (I think both those sites store hashes).

whats a hash?

[Chaikel]

No, just secure.

I'm not that paranoid, I actually trust AwardWallet and Yodlee with many of my accounts' passwords (I think both those sites store hashes).

Hashes are far from impenetrable. There are free hash crackers online.

[Zeeeeks]

With my password system, I have five 'layers' (tiers, using a separate sub-system). One for sites I don't really use an account on, then for forums/blogs etc. then for sites that have my CC on file (e.g. e-commerce sites) and lastly one (super-secure) layer for sites that have info that really needs to be secure (ssn, banks etc.). I also have a separate one for email, in-case you want to use that to reset my passwords elsewhere). This way even if you break one of my systems with less secure sites, the more secure data is likely to stay safe.

Would you use the same password for the same tier (two credit card companies)?

[AsherO]

whats a hash?

A hash is an encrypted string that's generated using your password (and possibly other data).

Hashes are far from impenetrable. There are free hash crackers online.

I'm sure Yodlee uses salted hashes (which are virtually impossible to reverse engineer if you don't know the salting algorithm). I think Yodlee even uses tokens for banks they have a relationship with. They do bank security for a living, so I trust them.

Would you use the same password for the same tier (two credit card companies)?

The same password system, but unique passwords. I do have some old passwords which I've used everywhere, but they've (mostly) been phased out and aren't easy to brute-force (i.e. they'll survive a dictionary attack).

[dirah]

For any Norton users out there, you can use the "identity safe" option of their Internet Security Suite.
It stores your passwords, all you need to remember is one "master" password.
When you are logged in, it preloads your login info when you visit the webpage.
And you can backup the passwords file.

I know people have stong feelings about Norton; if you don't like the message, don't shoot the messenger!

[Chaikel]

Firefox has an option to put a master PW on stored PWs

[Cholentfresser]

well, paperclipped to the back of every bank/CC file, I have a paper with a pic of the front/back of each card and the log info for that account.
usually I remember the PWs but in case I forget, I can always look it up.

[AsherO]

well, paperclipped to the back of every bank/CC file, I have a paper with a pic of the front/back of each card and the log info for that account.
usually I remember the PWs but in case I forget, I can always look it up.

That doesn't sound too secure...

[Cholentfresser]

well, I guess if someone walks into my house, finds the file, looks at the last page...then you're right.

[AsherO]

well, I guess if someone walks into my house, finds the file, looks at the last page...then you're right.

Do you have it with you in Yeshiva? If it's at home, you can't possibly access it too often.