8 minutes ago, JimBrown said:

Worst thing you can do is re-use the same password on different sites.

Best bet is a password manager, such as Lastpass (what I use). I currently have over 200 passwords, all of them different, and all of them random alpha-numeric-symbols of at least 16 characters (majority are 32 characters). I only have to remember one password, for the password manager, and it is a long phrase that means something to me and is easy to remember. Bonus with a password manager is that it can be set up to automatically fill in username/password on most sites.

For sensitive sites (banking, government, etc.) one should also enable two factor authentication (2FA) whenever possible.

...jim

 

I use Keeper as my Password Manager. I have over 100 passwords, all different. I also use two factor authentication whenever it is available. 

Edited September 13, 20223 yr by Bobsk8

1 hour ago, JimBrown said:

Best bet is a password manager, such as Lastpass (what I use). I currently have over 200 passwords, all of them different, and all of them random alpha-numeric-symbols of at least 16 characters (majority are 32 characters). I only have to remember one password, for the password manager, and it is a long phrase that means something to me and is easy to remember.

I've been thinking about that too but... this way ALL of your passwords are protected by only ONE password. If that one gets hacked, all your passwords are hacked. I find it a bit odd to protect hundreds of passwords with just one... I feel safer using various passwords myself and indeed two factor authentication when possible.

3 minutes ago, JeffF said:

Unless I'm missing something

It was initially posted in the MSFS forum. Hence the heated reaction of some. 😉

2 minutes ago, tup61 said:

It was initially posted in the MSFS forum. Hence the heated reaction of some. 😉

Gotcha, thanks. I deleted the post.

16 hours ago, Fielder said:

Of course few of us use email passwords to read our messages, except once in a blue moon. But that password is what keeps others from reading them and for instance stealing your Steam Account and all your Steam purchases. They just type your email on the steam login and check the box: "forgot my password". Then they read the email from Steam and use that to reset the password.

How do "they" receive the email that is sent to your email address?
 

1 hour ago, tup61 said:

I've been thinking about that too but... this way ALL of your passwords are protected by only ONE password. If that one gets hacked, all your passwords are hacked. I find it a bit odd to protect hundreds of passwords with just one... I feel safer using various passwords myself and indeed two factor authentication when possible.

True, but not as bad as you might think. One must make the master password as "unhackable" as possible (ie: very long, not stored electronically anywhere, etc.) and use a password manager with two factor authentication.

I'm getting a bit old and my memory is not as good as it used to be. I will NOT re-use passwords on different sites, but remembering over 200 unique (and strong) passwords is just not feasible.

...jim

 

1 hour ago, Reader said:

How do "they" receive the email that is sent to your email address?
 

If they have your email password, they can just log on to your email account with any email client of their choice.

...jim

 

Someone in Malaysia stole my Steam account back in FSX days. But I recovered it.

I've seen messages on this forum from others with a stolen Steam account in the  past. They did get it back, but meanwhile I guess the crook had fun flying around. I'm not sure what all could happen if someone had setup a credit card in Steam wallet.

22 hours ago, JimBrown said:

One must make the master password as "unhackable" as possible (ie: very long, not stored electronically anywhere, etc.)

I use a random GUID generator to come up with a unique password. I remove the dashes (-) if necessary:

n123e4567-e89b-12d3-a456-426614174000