When Heartbleed dropped, I marked all my passwords in red and only changed them back when I updated that website password. I had Keepass remind me to generate and rotate that password every quarter just in case. For example, I once had a bank that limited passwords to 8 characters. It can also protect me against terrible password policies. I stay logged out of most websites by default.
This is my backup in case I lose access to my Keepass db.Īs one last bit, I have Keepass to auto-lock after a bit of inactivity, so I'm constantly retyping that password. KeeWeb is a brand-new, open source program and web application that supports KeePass databases. Additionally I have the Keepass password written down in a safe (separate) place just in case. Most services are tied to my email, so I have both 2factor auth AND recovery codes that I have stored in a safe place. It takes 500ms on my beefy desktop to unlock the DB, and almost 3 seconds on my macbook. Keepass keeps the DB file secure with encryption and many rotations, so I'm not afraid of a brute-force on the file itself.
0 kommentar(er)
