this post was submitted on 19 Jul 2025
396 points (91.9% liked)

Technology

72957 readers
2945 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
 
(page 2) 50 comments
sorted by: hot top controversial new old
[–] cupcakezealot@piefed.blahaj.zone 34 points 17 hours ago (2 children)

this is my internet password logbook

"sanrio spotty dotty diary"

[–] DeceasedPassenger@lemmy.world 10 points 15 hours ago (1 children)

That is tight as hell and I love it

[–] cupcakezealot@piefed.blahaj.zone 5 points 14 hours ago (2 children)
[–] 01189998819991197253@infosec.pub 4 points 14 hours ago

It's $55 (I'm assuming USD). Or "4 interest-free payments of $13.75". On one hand, it's expensive. On the other hand, it's bloody brilliant!

[–] DeceasedPassenger@lemmy.world 2 points 14 hours ago

Hells yeah thank you for sharing :D

load more comments (1 replies)
[–] ansiz@lemmy.world 19 points 16 hours ago (1 children)

Sure, it's a horrible idea in an open office environment but if someone wants to use this at home for all their passwords it really won't hurt anything.

[–] Ebber@lemmings.world 2 points 9 hours ago* (last edited 9 hours ago) (1 children)

Especially when helping your parents living in the middle of nowhere.

Seeing them struggle with the changes happening in the last few decades, makes me worry what I'll be like when i need some young whippersnapper so that I can pay via personal, irrational, conditional thinking.

load more comments (1 replies)
[–] TheGrandNagus@lemmy.world 61 points 20 hours ago (14 children)

Honestly, a physical password book isn't a bad idea.

Not accessible via the internet, and in most cases if someone has physical access to your system you're done for anyway.

The main weakness it has is from a nosey flatmate, spouse, or child in the house.

[–] tiramichu@sh.itjust.works 35 points 18 hours ago

Yep. My Dad in his late 70s uses this system and it works great for him.

People make fun of it, but for people with low tech literacy this is actually far better than having a mish-mash of solutions where some their logins end up automatically saved in iOS on their phone, some are saved in Chrome on the desktop, some are just in their head, they don't know where anything is, and are constantly losing access and resetting credentials all the time.

And it definitely reduces the burden on me of parental tech support, when its all in the book.

[–] Romkslrqusz@lemmy.zip 2 points 10 hours ago (1 children)

For the majority of my clients who use this kind of system, it is totally dysfunctional.

Most of the records are incorrect, my guess is that they occasionally reset the password on mobile while the book is inaccessible and then don’t remember to update it in the book later.

Effective use relies on the user’s understanding of umbrella accounts. I’ve had users have separate written entries for “Office”, “Skype”, “Hotmail”, and “Windows” because they don’t understand those things are all one Microsoft Account.

As passwords get updated, it can become a mess of crossed out records with new ones squished into the margins. When a someone dies, anything written illegibly can be difficult for surviving family to discern. As the book gets filled out, it can get tricky to keep things alphabetized unless the user provisioned additional empty space between records.

This system can work great for someone who is meticulous, neat, and organized.

For your average person, I’ve had better luck solving the problem with a password manager synced to an online account that is protected by MFA and has recovery options that are also protected by MFA.

load more comments (1 replies)
[–] Eezyville@sh.itjust.works 1 points 10 hours ago

The main weakness it has is from a nosey flatmate, spouse, or child in the house.

Watch out for that home grown script kiddie

[–] DJDarren@sopuli.xyz 11 points 18 hours ago

My Mum died recently and my step dad is shit with tech, so their password book was invaluable in helping us gain access to her Apple account and her phone. It meant we were able to get to her iCloud passwords, so now we have access to everything.

So yeah, password books are actually pretty handy.

[–] tarknassus@lemmy.world 5 points 16 hours ago

“People can no longer remember passwords good enough to reliably defend against dictionary attacks, and are much more secure if they choose a password too complicated to remember and then write it down.

We're all good at securing small pieces of paper. I recommend that people write their valuable passwords down on a small piece of paper, and keep it with their other valuable small pieces of paper: in their wallet.

Obscure it somehow if you want added security: write "bank" instead of the URL of your bank, transpose some of the characters, leave off your userid. This will give you a little bit of time if you lose your wallet and have to change your passwords. But even if you don't do any of this, writing down your impossible-to-memorize password is more secure than making your password easy to memorize.”

Bruce Schneier - 2005.

[–] brot@feddit.org 7 points 18 hours ago

Yeah, my in-laws have such a book and it honestly is great. They live in their own flat where nobody can access the book without breaking in. They do not save their passwords in their browser, so anyone hacking into their PC can't grab them. If they want to login into an account, they take out their book, put in the user name and unique password and that's it. Quite the good method and I really do not see many problems there.

load more comments (8 replies)
[–] vk6flab@lemmy.radio 171 points 23 hours ago (7 children)

Here's the thing .. as crazy as a notebook with passwords sounds, it's not accessible to someone across the internet.

[–] 6nk06@sh.itjust.works 63 points 23 hours ago (1 children)

Password managers check the URL before giving its data. A human being can be fooled into giving it to a fake web site.

[–] MentalEdge@sopuli.xyz 35 points 22 hours ago* (last edited 22 hours ago) (3 children)

TBF, they can be fooled too.

Bitwarden warns against using autofill on load for that very reason, as then simply loading a malicious page might cause it to provide passwords to such a site.

And then, a human when a site doesn't autofill, is more likely to just go "huh, weird" and do it manually.

[–] Serinus@lemmy.world 5 points 16 hours ago (5 children)

Wait, what? How does autofill get fooled?

load more comments (5 replies)
[–] Darkassassin07@lemmy.ca 16 points 21 hours ago* (last edited 21 hours ago)

You've always got the human element, bypassing security features; but extra little hurdles like a password manager refusing to autofill an unknown url is at least one more opportunity for the user to recognize that something's wrong and back away.

If you're already used to manually typing in the auth details, you may not even notice you're not on the site you were expecting.

load more comments (1 replies)
[–] AnUnusualRelic@lemmy.world 4 points 15 hours ago

Please hold your password notebook in front of the laptop camera.

[–] vext01@lemmy.sdf.org 14 points 20 hours ago* (last edited 20 hours ago) (1 children)

Yeah, It's actually quite a secure way to store passwords, since it requires physical access.

I knew a guy who had a drawer full of slips of paper with passwords written on. He called it the "security drawer". Made me smile, but probably shouldn't have been advertising it.

load more comments (1 replies)
[–] BlackPenguins@lemmy.world 6 points 17 hours ago (1 children)

Just maybe don't plaster "THESE ARE MY SECRETS" on the cover. Security through obscurity.

load more comments (1 replies)
load more comments (3 replies)
[–] BlackPenguins@lemmy.world 18 points 17 hours ago (2 children)

That Web Addresses placement is killing me.

[–] merde@sh.itjust.works 7 points 17 hours ago

they just centered the whole thing 🤦

load more comments (1 replies)
[–] bigbabybilly@lemmy.world 26 points 19 hours ago (2 children)

Oh yeah, this is for my in-laws. This is peak boomer tech right here.

[–] hansolo@lemmy.today 8 points 18 hours ago

Can confirm. I had to do a double take that I didn't write this comment and just forget.

[–] TwoBeeSan@lemmy.world 4 points 16 hours ago (1 children)

Of the 200 elderly I see maybe 75% still use the book or a variation of it.

The best is when they use iPad notes or even their fucking contacts to save info lol

load more comments (1 replies)
[–] StrawberryPigtails@lemmy.sdf.org 50 points 23 hours ago

So... It's a password book? Like, pen and paper?Not the best choice for storing passwords, but I'd be more willing to do that than trusting Amazon not to hold my passwords hostage with a digital service by them.

[–] CallMeAnAI@lemmy.world 25 points 21 hours ago (8 children)

Best option for non techies at home.

load more comments (8 replies)
[–] LogicalDrivel@sopuli.xyz 6 points 16 hours ago* (last edited 16 hours ago) (1 children)

Im guilty of this. I dont write out the passwords in plaintext though. Its mostly just a few letters to remind me of which version of my many "master" passwords i used and then asterisks. ~PW0****$~ kinda thing. I know its bad but I can't bring myself to trust a password manager.

[–] MangoCats@feddit.it 9 points 16 hours ago

If you keep the book secure, it's probably safer than any computer based record system - right up until someone untrustworthy gets their eyes on the book.

With a physical book, you can store it in a safe deposit box when you don't need access, make partial copies, copies take (everyone, bad guys and good) significantly longer to make even with a photocopy process... most importantly, people intuitively understand the vulnerabilities of a physical book.

Now, the physical book won't stop keyloggers...

[–] logicbomb@lemmy.world 20 points 22 hours ago (6 children)

This isn't even weird.

I think most security experts would recommend that you have your most important passwords written down somewhere, and then hopefully locked up in some safe or deposit box somewhere. You don't need to buy an entire book for it, but some people like to spend money.

If this is for your less important passwords, then for the most part, writing them down is actually better. You won't be as tempted to reuse your banking password for your social media. And some people like writing things down. A password manager is a better solution, but lots of people aren't as good with technology and if they even let the browser remember it, they won't know how to retrieve it later if they want to use a different computer, for example.

load more comments (6 replies)
[–] A_norny_mousse@feddit.org 6 points 18 hours ago (1 children)

My master password is physically present as a mnemonic device, but not available digitally. Anywhere.

Beyond that I really cannot recommend this book: You need to be able & willing to type your passwords out, which means simpler and shorter passwords. I use 99 character complete random ASCII-strings by default. Try typing that in even once.

But there's a different, unspoken criticism here: don't store your database on a 3rd party server, a.k.a. "The Cloud". I use KeepassXC btw. - and my very own "cloud".

[–] SaltySalamander@fedia.io 3 points 17 hours ago

I'm sure grandma could figure out how to do all of this.

[–] lemmyng@lemmy.ca 16 points 23 hours ago

I'd rather people use this than reuse the same password everywhere.

load more comments
view more: ‹ prev next ›