Hacker News Reader

I have 363 sites in my LastPass vault... I'm supposed to write these all down?

Even if you assume many of those sites I don't use anymore, we're still talking a shitload of passwords I'm supposed to have written down somewhere.

View on HN

How many of these sites actually need secure passwords? How much would anyone gain by e.g., impersonating one on a forum site? If that number is close to zero, one could just use the same "standard" password for all low-security-value sites and be done with it. For other, slightly higher-value sites, one could leave one's devices logged in as long as practical, and generate a new 15-character password every time one must use the "forgotten password" email-a-capability-URL feature. For the designated secure email account, and maybe for certain financial sites, one might need to remember or write down a passphrase, but there will be fewer than 363.

Reply on news.ycombinator.com