In the past, I was a user of bad passwords. Anything I didn’t care about I’d just pick an easy one. Probably 60% of the passwords I created, I did not care at all about and would’ve been perfectly okay with someone cracking them if they’d wanted to.
I have since changed my ways and use good passwords now. I want nothing to do with biometric data collection and hope that it never becomes normal. Everyone without some kind of brain problems that prevent it should create and remember one good password — the one for their password manager.
I’d use at least one more: The one that unlocks your device shouldn’t be the one that unlocks your password manager. Other than that, yes. Use a password manager, let it generate per-service passwords for you, and make sure you have a backup plan.
For example, I use a KeePass database shared across my devices via a self-hosted NextCloud. Each of my devices plus the server effectively holds a backup copy so I’d have to lose all of my devices plus the server before my password database becomes inaccessible. Since the server lives in a datacenter it also serves as a remote backup.
If your password manager is SaaS, you might want to investigate how to protect yourself from scenarios like the service being down or you losing access to the account.
In the past, I was a user of bad passwords. Anything I didn’t care about I’d just pick an easy one. Probably 60% of the passwords I created, I did not care at all about and would’ve been perfectly okay with someone cracking them if they’d wanted to.
I have since changed my ways and use good passwords now. I want nothing to do with biometric data collection and hope that it never becomes normal. Everyone without some kind of brain problems that prevent it should create and remember one good password — the one for their password manager.
I’d use at least one more: The one that unlocks your device shouldn’t be the one that unlocks your password manager. Other than that, yes. Use a password manager, let it generate per-service passwords for you, and make sure you have a backup plan.
For example, I use a KeePass database shared across my devices via a self-hosted NextCloud. Each of my devices plus the server effectively holds a backup copy so I’d have to lose all of my devices plus the server before my password database becomes inaccessible. Since the server lives in a datacenter it also serves as a remote backup.
If your password manager is SaaS, you might want to investigate how to protect yourself from scenarios like the service being down or you losing access to the account.