<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">If you believe Dashlane’s claims about their architecture, attacking their infrastructure wouldn’t help since they don’t store your master password or unencrypted passwords.<div> <div><div><br><blockquote type="cite"><div>On Feb 3, 2024, at 12:48, Jon Dreyer via LCTG <lctg@lists.toku.us> wrote:</div><br class="Apple-interchange-newline"><div>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<div><p>I share Derek's concern about data breaches. I also share the
concern that Steve pointed out about the single point of failure
on a piece of paper (paper does have other disadvantages,
including lack of sort and lack of copy-paste). Plus, I'm ornery
and cheap.<br>
</p><p>I have my own Web site, so what I do is to have a text file
that's on the Web but unlinked. It has two kinds of passwords. For
sites I'm not that concerned about, in the text file I have a
password hint that I'm quite sure only I and one or two close
friends could understand. For the more important sites, I use a
random password (I have a short ruby program that generates them
but it's easy enough to make up random enough passwords). But
there's a secret but easy transformation I must manually do to the
password that's in the file after I copy/paste it to the site I'm
trying to log in to.<br>
</p><p>I can use this anywhere, with my phone or computer. Of course I
have backup copies.<br>
</p><p>All of this would be much simpler to crack than trying to break
into Dashlane or whatever, but given the target size and value,
I'm quite confident that nobody would go through the trouble.<br>
</p>
<div class="moz-signature">-- <br><p style="font-family: Times, serif">
Jon "Cut 'Em Off At The Password" Dreyer<br>
<a href="http://www.passionatelycurious.com/">Math Tutor/Computer
Science Tutor</a><br>
<a href="http://music.jondreyer.com/">Jon Dreyer Music</a>
</p>
</div>
</div>
===============================================<br>::The Lexington Computer and Technology Group Mailing List::<br>Reply goes to sender only; Reply All to send to list.<br>Send to the list: LCTG@lists.toku.us Message archives: http://lists.toku.us/pipermail/lctg-toku.us/<br>To subscribe: email lctg-subscribe@toku.us To unsubscribe: email lctg-unsubscribe@toku.us<br>Future and Past meeting information: http://LCTG.toku.us<br>List information: http://lists.toku.us/listinfo.cgi/lctg-toku.us<br>This message was sent to abroun@gmail.com.<br>Set your list options: http://lists.toku.us/options.cgi/lctg-toku.us/abroun@gmail.com<br></div></blockquote></div><br></div></div></body></html>