Use a password manager.
All password managers are shit shows.
#passwords — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #passwords, aggregated by home.social.
-
-
Dear Friends with written down #passwords
Do you have too many? Metto... eh metoo... me 2. What to do?
- Use a password service. Sounds about as secure as post-it-notes all over the place to me.
- Use a single password book? Wot? I would have to employ myself for days possibly weeks for that option...
- Continue with #chaos model. Bit of this and a byte of that. Job done. I likes it already.
:anonymous: :anon: ⁉️
-
Lol the Ashes of Creation lawyers (the new ones, not the original ones that didn't get paid and were scammed by a million dollars) leaked all of their company passwords by sending them to court unredacted and making them public information now.
-
"Passkeys Are Not a Trap"? Nice Try Scott Helme, founder and CEO of a company that markets a "Passkeys Protection" offering.
https://scotthelme.co.uk/passkeys-are-not-a-trap/
Sorry, your article is patronizing me about what attestation is, then explaining that passkeys today don't give websites an attestation at all - though a site can ask. And in so doing, it completely fails to address the main criticism of the "Passkeys are a trap" blog post, i.e. that passkeys are the boiling frog of BigTech control on authentication.
https://nonfunctional.substack.com/p/passkeys-are-a-trap-do-not-use-them
The only point I concede is that TOTP are vulnerable to phishing. And yet, if I really have to choose, I prefer that risk rather than handing over control to Google, Apple, and co. In any case, hardware authenticators like Yubikey / NitroKey are the preferred solution.
Sorry, not convinced. Passkeys are a trap. Do not use them.
#passkeys #security #cybersecurity #bigtech #google #apple #enshittification #bigtech #digitalsovereignty #opensource #infosec #passwords #phishing #totp
-
So when did we all agree that sending a one-time password in email is more secure than using a secure password?
-
I am still not using passkeys unless I get forced to. Strong #passwords are enough for me. I try to avoid any phone number based 2nd factor but in general am a fan of 2nd factor for important sites.
This seems like a good article for those seeking info
"Keep using passkeys! Wherever a site offers one, take it, and store it in a password/passkey manager you trust. If you want to be able to move your credentials around, pick a provider that supports that."
-
Fake Calendly “Meta Careers” pages steal Facebook and Google logins
An interview invitation becomes a trap for your Facebook and Google passwords, even with two-factor authentication turned on.
Pulse ID: 6acf6dd3ca2d5b23dbf6a2d5
Pulse Link: https://otx.alienvault.com/pulse/6acf6dd3ca2d5b23dbf6a2d5
Pulse Author: CyberHunter_NL
Created: 2026-10-14 11:56:03Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#Facebook #Google #Passwords #TwoFactorAuthentication #OTX #CyberHunter_NL
-
🚀 New #release · Bitwarden v2026.10.0
What's Changed
• Added support for sharing vault items through temporary links
• Added a setting to configure access token lifetime
• Fixed switching to annual billing during a trial charging an extra month
• Various under-the-hood improvements and minor bug fixesFull release notes & setup → https://selfhost.directory/project/bitwarden#update-21633660