Ditch the master password in favor of passkeys

[grb]

@W01V3N

@W01V3N

Right now logging in via the master password is risky because people can see me typing my password, and even though I type fast, I can’t be too careful here. I also have to remember the master password, changing it often.

So not only is it weak, but also not convenient. There’s no option for me to use a random master password, how am I supposed to remember it? Write it down? Someone can steal what I’m writing down.

I have to go back to my previous question (which was not answered yet): Why are you changing your master password “often”? It should only be changed if it has been compromised.

Also, why are you using your master password so often? Are you logging out of your vault each time you use it, and if so, why? Normally, one would remain logged in semi-permanently, and just lock the vault to protect it while not in use. To unlock the vault, you can use a simpler password or PIN, or even a fingerprint or Face ID.

@W01V3N

There’s no option for me to use a random master password, how am I supposed to remember it? Write it down?

You need to use a random high-entropy master password that you can memorize. This means that your master password should be a randomly generate 4-word passphrase.

And yes, because memory can fail, you do also need a written record of the master password — but this “emergency sheet” must be stored in a secure location. If you have no fully secure locations available for hiding your emergency sheet, you can use a technique such as Shamir Secret Sharing.