Are Password Managers Safe? Plus Talk on Password Bad Habits

If you have bad password habits then the result will be a hack. You need good password management habits. We will discuss if you can use Password Managers to keep these good habits and if these solutions introduce more risks themselves.

-----------------------------------
-----------------------------------
Merch Store
-----------------------------------

I'm the Internet Privacy Guy. I'm a public interest technologist. I'm here to educate. You are losing your Internet privacy and Internet security every day if you don't fight for it. Your data is collected with endless permanent data mining. Learn about a TOR router, a VPN , antivirus, spyware, firewalls, IP address, wifi triangulation, data privacy regulation, backups and tech tools, and evading mass surveillance from NSA, CIA, FBI. Learn how to be anonymous on the Internet so you are not profiled. Learn to speak freely with pseudo anonymity. Learn more about the dangers of the inernet and the dangers of social media, dangers of email.

I like alternative communication technology like Amateur Radio and data communications using Analog. I'm a licensed HAM operator.

Please follow me on
Odysee
Rumble

[itwsntme]

Great video as usual.

Yes there are keepass apps in the app store. I use one. A few additional steps I take, some kind of inconvenient, but I'm used to them

1) My keepass db is never online. At least not willingly. Never in dropbox, never emailed, etc. Some automatic backup system may have copied it at some point (iCloud backup for instance, even though I keep that one local too)

2) My db is not even in my computer. Its on a usb drive I plug in when I want to use it. It is backed up several times though. This is actually based on advice from Rob in another video.

3) Not only I use different passwords on each site, but different emails. I just create a new one for each, which means I need to keep two passwords per site. One for the site and one for the email Not a big deal, all is in the db. I used to use protonmail for this, but they have cracked down on this kind of behaviour.

4) Whenever I need to dispose of an old drive where the db used to be, I change all my important passwords. Easy when keepass generates them for me.

5) My master password lives only in my head. It was written to a piece of paper once that my wife has, should the need ever arise.

My only reservation about keepass is that it uses the clipboard to transfer the credentials. Although in MacOS you can have it send the creds directly to the browser. I did read a while back about some rogue mobile apps that would constantly monitor the clipboard, hoping to capture some of this. A very easy thing to slip into an app. Just be careful what you install in your phone.

[iteerrex]

The luxury of “Convenience” is being used to taken advantage of people everywhere. It takes exercising some self discipline to counteract it.

[jeffharmed]

Useful thanks. AI might be a major threat to password managers now that AI is now sitting in every phone monitoring key presses

[SonofChurchill]

Always keep a backup of passwords as haD some managers go wrong or get locked out! Thanks for video

[Sb]

I use a text file generally but I do also use a completely offline password manager on a Palm PDA, backed up to an SD card and that SD card encrypted.

[braxtonperry]

You are like a Farmer
Outstanding In Your Field 😎

[TheJackiMonster]

Isn't one obvious attack vector of offline password managers that an attacker would install a key logger or some software pretending to be the master password input dialog to just steal the master password? I mean the big difference between using many different passwords manually instead of automatically via a password manager is that you would loose all your passwords immediately instead of loosing them over time by key logging. So there's a lower chance to notice the attack before maximal damage is already done.

I personally do not like relying on software security to store my passwords to be honest. The inconvenience to use my passwords across devices, especially when I'm not on my own device, is also a huge downside.

Anyway it's a great video about the topic! Really informative!

[brianb.]

Question. If you don’t use browser extension to fill password info into the site how do you copy it over? 1) copy and paste, not good 2) view then memorize and type in? Thank you :)

[ConstitutionalRepublicStands]

you're opening is hilarious, and I truly appreciate the humor and influence for this content. :)

[janburn]

Thanks very much for all that information about password managers. I've been considering for a while now whether I should use a password manager. To date I've been relying on my memory, with what are for me, easy to remember passwords, usually 8 to 15 characters in length. Fortunately I don't have that many passwords to remember, & it hasn't been a problem for me to date.

[ArtOfHealth]

Some banks and businesses are limiting us to 8 and 15 characters. I think this is nuts.

[jezzamobile]

Excellent video again!
Very helpful 👍
Thanks Rob.

[darcy]

one of the best youtubers in this field

[tairikuokami]

As long as you disable automatic autofill, PM are pretty safe, still I would not store core passwords there, since they can be used for password recovery and MFA.
P.S.: Keepass used to allow a keyfile, you were not be able to open the database, if you did not have it. Not sure, if it still the case. It provided an ultimate 2FA protection.

[zoenagy]

bitwarden is the standard answer to PC+mobile

[scotttovey]

Apparently, the only video of yours that chatGPT has watched was the one in which you mentioned using a password manager.

Well, now we know that chatGPT doesn't binge watch videos on YouTube.
LOL

[invisableobserver]

Rob, can you do a video on how safe privacy credit cards are? Is there a way to buy a brax phone & cell service without revealing my identity?

[timjph]

Actually, with 1password at least in its current form (v7) it is possible to securely distribute the password file between devices without it being stored on any cloud service. 1password does offer online accounts, but also an alternative to temporarily run a WLAN server on the macos version that iOS devices can sync to. I have kept with 1password because it offers this option as I too feel uncomfortable about having a copy of my passwords file in the cloud. Note WLAN doesn’t support sync between multiple macos devices though, so its not a total solution, but it does support other sync options which can address this.

[kkqpsby]

I wonder what do you thinks about Passkey. Could it become a password management standard?

[christopherguy]

What about hardware password managers such as Mooltipass? They seem to be more secure in exchange for carrying a device in your pocket.