Hacker News Reader

Comment by jkingsman | Hacker News Reader

It's a cute idea and I love the concept from XKCD, but the best practice is just to use a password manager and stop trying to remember passwords (and absolutely never reusing passwords).

View on HN

But:

- you need a password for your password manager

- you also need a password for your actual desktop/phone, when the manager is inaccessible.

- you may have a work computer requiring a different password as well

Here are already 3, ideally different, passwords you need to remember.

I only have to remember one password: to my password manager. My phone uses a different unlock method entirely, and my work computer's password is stored in my password manager.

Although after a couple of days of using a new password regularly, I can't help but have it memorized anyhow.

Most humans create terrible passwords (myself included) and I really benefit from simply having a random word generator. I use generators like these to create a random word cloud to pick and chose from to create my actual password. I also might have to read particular passwords over the phone to someone in a rare emergency so real words help with that a lot. This particular one doesn't throw enough random symbols in between words IMO, I also like to throw in misspellings and random caps which none of them seem to do.

Yes, I use a random password generator for all of my passwords. But I don't use the XKCD method because I actually find that style of password more difficult to remember and more of a pain to type in.

Reply on news.ycombinator.com