Since I’m already expected to remember a complex master password for bitwarden, it seems a bit too much to remember another long password for my mobile device and another for my laptop.
Do you all use the another complex password as a screen lock? Or a simpler password/pin which is easier to remember? What about biometrics? Cuz guarding access to the device itself is as important as guarding the Bitwarden vault.
I’m a fan of making things easy for myself, so all my passwords are things that I can easily remember with a picture in my memory (cf. “correct horse battery staple”). That mental image is what saves me. On some occasions I have included in my notebook on my desk, a sketch of the situation described, to jog my memory. This helps when I’m at a new job and have to remember yet another password. But as much as possible I keep my passwords on bitwarden so I can look them up on my phone.
(Passwords listed here follow a pattern loosely similar to that described, not necessarily this exact method).
My password for bitwarden is something like “pizzaShopNearLiquorStore,PostalCode90210”.
All other passwords go in bitwarden, but some stick in my mind because I type them frequently.
My laptop is encrypted, the password is a description of some things on my desk at the time, something like ‘RedPenOn6” SteelRuler,LeftOfMousepad’.
The login password is something like “1goja2cocwb” (1 glass of juice and 2 cups of coffee with breakfast”
Yes I use fingerprint and face recognition on portable devices (I know I shouldn’t, but it’s convenient) and I use long PIN numbers that describe something I can remember or look up, like 4654384400 : distance, d=4th letter; from, f=6th letter; earth, e=5th letter; moon = 4 letters; 384400 (km)
Nice try, FBI.
A pass sentence is very hard to crack and easy to remember. Throw in a couple of numbers and capital letters for good measure.
Example password
I really dislike that I have to remember super long passwords with more than 11 characters!
Time to brute force: 243 billion trillion trillion trillion years.
But does anyone actually brute force any more?
I have fingerprint biometrics protecting my phone’s lock screen and the vault itself - I feel this is the biggest weakness in my security, both from weaker legal protections (there are situations where you cannot be compelled to give your password but your fingerprints aren’t protected) and the fact that my phone has my fingerprints all over it.
My desktop just has a numeric PIN on the lock screen since you also need to enter the Bitwarden master password (and you need to be in my house to get the chance to type it in).