Loading…
4
Switched from 123456 to a passphrase after my bank flagged a login from Ukraine
Last month I got a text from my bank about a login attempt from an IP in Ukraine, and I nearly threw my phone across the room. I did some digging and figured out my password was on some old leaked list because it was basically the same thing I'd been using since college, just with a number swapped out. What really got me was comparing that mess to what I set up after: a four word passphrase like "purple-tractor-sings-loudly" that I can actually remember without writing it on a sticky note under my keyboard. The difference is night and day. My old 8 character thing took some cheap cracking rig about 40 minutes to bust, but this passphrase would take a few billion years at the same speed. I also turned on the authenticator app instead of SMS codes, since SIM swapping is a real thing now and I'm not trying to get got twice. Six weeks in and logging in is honestly faster than before because I'm not mashing the reset button every other week. Anyone else made the jump to passphrases, or are you still riding with the password manager and random strings?
1 comments
Log in to join the discussion
Log In1 Comment
bethpalmer3d ago
Ha, okay but passphrases get keylogged too, same as anything.
7