<p>I literally have several hundred IDs and passwords to various sites. Fifteen-twenty years ago, I would use essentially the same ID and password (or variant, if someone insisted on multiple digits or whatever), and the same answers to questions like my city of birth, mother’s maiden name, or childhood best friend. This would apply to my ID for my mutual fund company that has most of our money or a login to our local movie theatre.</p>
<p>About ten years ago, I became very leery that if someone hacked into one obscure vendor where I had put in personal info, they could potentially do way too much damage, and went about changing all my passwords and hints. For the top couple of dozen accounts that I consider critical there is practically nothing that is the same, which means I don’t have much of a chance of knowing what my first car was supposed to be for credit card x’s account. The problem is keeping track of all these IDs, codes, and hints. What do you folks do?</p>
<p>Some people suggest having the same password “base” but including other letters at the front or end. For example, yahoo password might be Y1234 and, LLBean may be LLB1234, etc.</p>
That’d be fairly easy to hack - it doesn’t sound like a good idea.</p>
<p>
That could very well not be true about the 'bigger problems with the break-in. For example, if you use online banking and have your credentials readily available in a binder (or in a non-encrytped file on your PC), one could then hack into your bank account and transfer your money out of there. That’s potentially a lot worse than stealing some old appliance, loose cash laying around, or a used power tool. Of course, there are other things they could do as well such as credit card fraud, buying things from your online accounts like Amazon, etc.</p>
<p>Writing this in the clear in a rolodex, binder, a file on your PC, etc. is all a bad idea.</p>
<p>I have 2 Apps on my iPhone that I use to store passwords and other info- KeyRing and SafeWallet. Both are good. I am guilty of using a stock set of passwords and really do intend to change them up soon. It’s all such a pain.</p>
<p>The PC file suggested here is encrypted and password-protected. What were you suggesting to store the passwords in the cloud? I have my opinions on that but I’d rather store my password database in my own file than floating out there in some server that can be easily compromised.</p>
<p>Then, when I have to access a given site I just hit the link, “Forgot Your Parssword?” or its variant and wait for the e-mail alllowing me to change my ID/password.</p>
<p>I remember most of my PWs; I keep a spreadsheet at work with all of them. With security questions, I keep it simple. First pet? Fluffy. First car? Fluffy. Favorite teacher? You guessed it – Fluffy.</p>
<p>I’m guilty of keeping basically the same user id and password for everything because I can’t remember. I just change them about every 6 months. </p>
<p>Hadn’t heard of the password keepers, so may try that, thanx!</p>
<p>My bank sends us a code on the (pre-registered) cell phone before executing transfers or certain transactions, so there is another layer of external security. We have been doing 95% of our banking online for the past 10+ years and have never had a problem. We do NOT have passwords in a file on our computer. </p>
<p>A couple of times our credit card company has had to replace a card, but all but one of those were data security issues at the credit card company and affected many more people than just us. Once we had someone charge stuff from the Apple Store on one of our cards, but DH noticed the tx within three hours (esp. since we did not own any Apple products!).</p>
<p>That said, I don’t do credit card transactions on public networks.</p>
That’s another ‘feature’ that makes hacking easier. If one can manage to get to your email then they can just do a ‘password reset’ function on the other sites to end up hacking into those. This makes the email PW one of the most important ones.</p>
<p>
That’s good - that’s one way to protect the passwords.</p>
<p>I store them in an encrypted application on my laptop. The laptop has offsite backup (under my control - not on someone’s server). I generally memorize several long strings of numbers and then mix them together along with typically an upper-case and lower-case letter and sometimes throw in an non-alphanumeric character.</p>