Hacker News Reader

Comment by roryisok | Hacker News Reader

The author recommends using a password algorithm that you can mentally process and then storing the results in a password manager. If you're going to store them why not let the password manager generate the pass for you?

View on HN

My guess is that the intent is that the passwords would be recoverable by you without the aid of a password manager, but that the relative convenience of a password manager still adds benefits (e.g. behaviourally: guiding you away from any potential tendency to opt for "simpler" passwords out of laziness)

> that the passwords would be recoverable by you

Just click "Forgot password"?

Passwords can be used for systems other than websites, where "forgot password"-type reset doesn't always exist.

I assume you're talking about OS logins or something. But lets be honest here, 99% of the passwords we use daily are for websites or web based services

I suppose I could reword "recoverable" to "usable in relatively rare situations where your normal password-manager-enabled workflow isn't conveniently available" - depending on how rare these situations are, resetting every single time could be quite an annoyance.

The author suggests storing in password managers optionally, "for reference". The point of using an algorithm to generate a password is that you only have to remember the algorithm and can always work out the password on a new computer.

Reply on news.ycombinator.com