The moment I realized my password manager setup was backwards

I used to keep my master password in a notes app on my phone, thinking it was safe since the phone had face unlock. Last March, I lost the phone on a bus in Portland and within 2 hours someone had reset my email through the notes app. The worst part was I had two-factor on everything else, but I never locked that one notes file. It took me 3 days to get back into my own accounts, and I felt like an idiot because I've been in IT for 8 years. Now I use a hardware key and write the master password on paper in a fire safe, which feels dumb but actually works. Has anyone else had that moment where the thing you thought was a safeguard turned out to be the weak link?

1 comments

1 Comment

xenam8412d ago

Yep, had the same gut punch when I realized my "secure" phone was just a gateway to everything. Moved to a yubikey and a laminated paper in my wallet, now the real worry is losing that.