[HN Gopher] Ask HN: I have 176 logins/accounts. How many do you ...
       ___________________________________________________________________
        
       Ask HN: I have 176 logins/accounts. How many do you have?
        
       Here is a screenshot of my Bitwarden: https://imgur.com/a/UdG7Inb
       They include some really important things such as:  Health
       insurance G-Suite for work Bill.com (which I use to get paid)
       IRS.gov (which I use to get un-paid) UK Companies House Register
       Interactive Brokers My bank  Obviously, anything with OAuth is
       "bundled" into my Google account. So if anything this is a huge
       underestimate.  I'm asking because of how insane auth has become. I
       know companies like OnePassword and Bitwarden are working on this
       and overall they do a great job. But I still have a near-stroke
       every time I have to do the "forgot my password" loop, or use Duo
       Mobile/other 2FA.  The only really good auth feature I've ever
       encountered has been Apple's "fill from Messages" feature as well
       as their Touch.
        
       Author : bojangleslover
       Score  : 83 points
       Date   : 2023-05-21 11:57 UTC (11 hours ago)
        
       | frompdx wrote:
       | I have 260 items in my vault. Of course, I'm sure it could use
       | some tidying up.
        
       | bombcar wrote:
       | The elites don't want you to know this but the accounts on the
       | Internet are free you can take them home I have 458 accounts.
        
         | Onavo wrote:
         | [flagged]
        
         | belter wrote:
         | Every time you "log-in", you're increasing your carbon
         | footprint :-)
        
           | bombcar wrote:
           | Most of the logins are sequestered in the password manager,
           | for which I get a moderately decent subsidy from the
           | government.
        
       | karmakaze wrote:
       | > But I still have a near-stroke every time I have to do the
       | "forgot my password" loop, or use Duo Mobile/other 2FA.
       | 
       | That's funny, I've stopped caring about remembering most
       | passwords and use the "forgot my password" loop as a login
       | mechanism for rarely accessed sites/services. I also only enable
       | 2FA on important ones like email, github, or banking. Basically
       | my threat model includes my ability to lose things.
        
       | plantroon wrote:
       | I have 728. Before Bitwarden I used password store. I migrated
       | with a script about 2 years ago, and I still don't have all the
       | necessary metadata in at least a half (meaning there is no icon,
       | usernames are messy, etc). I only update the old entries whenever
       | the accounts are needed, meaning that I haven't used half of them
       | in 2 years. So I "actively" use about 360 accounts on various
       | services.
        
       | ctoth wrote:
       | Exactly 256 in Keepass currently.
        
       | freitasm wrote:
       | I have 872 according to BitWarden:
       | https://cdn.geekzone.co.nz/imagessubs/3c01663b43a16e0b50577a...
       | 
       | I don't use OAuth, except for two services - which I could switch
       | to user/pass if I really wanted.
        
       | huimang wrote:
       | 445 logins for me on a self hosted bitwarden (vaultwarden)
       | instance. Although a lot of those are for user & root logins to
       | local machines I provision.
        
       | bastijn wrote:
       | My password manager says 407 currently in my vault. I only use
       | social login for very very limited amount of sites. My default
       | option is to create app/site specific accounts so I can append my
       | email with +sitename to see who leaks my data.
        
       | aaronax wrote:
       | I would not expect any true innovation to come from companies
       | such as 1Password or Bitwarden. They make money off
       | authentication being so craapy that an entire class of
       | applications has sprung up around it.
       | 
       | They will not innovate themselves out of existence.
        
       | gzer0 wrote:
       | I have over 4,000
       | 
       | This is because I rotate accounts frequently (well, besides
       | here).
        
       | suddenclarity wrote:
       | Slightly below 2000 last time I looked. Most sites don't support
       | deleting content or accounts. In best case they just "anonymize"
       | you. So it just keeps growing...
        
       | donaldihunter wrote:
       | 1Password says 348 for me, and I know there's many more that are
       | autogenerated and stored in a keychain.
        
       | quicklime wrote:
       | 312 entries, although only 37 were accessed in the last 12
       | months.
        
       | SoftTalker wrote:
       | A bit under 200, but only around 20 that I use with any
       | regularity.
        
       | lorenzk wrote:
       | 809 in Bitwarden. Collected and migrated over the years from
       | lastpass to enpass to bitwarden.
        
       | irrational wrote:
       | According to bitwarden, I have 363. Though, I have more than that
       | that are not stored in bitwarden. Some of them are my work
       | accounts, others are ones I created while on mobile where it is a
       | pain to add them to bitwarden. The real number is closer to 400.
        
       | manuelmoreale wrote:
       | 410 according to 1 Password. I do periodic cleanups though and I
       | should probably do one soon so the number of actual, in use,
       | logins is probably lower.
        
       | retrobox wrote:
       | More than 1000. More than I'd like. I can't help but wonder how
       | many websites my personal information is on at this point between
       | random shopping, forums, and all the rest.
        
       | AH4oFVbPT4f8 wrote:
       | 1322 currently in Bitwarden
        
       | tasuki wrote:
       | 206
       | 
       | Not counting all the sites for which I use the "Log in with
       | Google/Facebook/etc". Many of these credentials I haven't used
       | for years.
        
       | blitzar wrote:
       | 746 accounts.
       | 
       | 746 unique passwords, ~600 unique usernames, ~600 unique email
       | addresses.
        
       | zimpenfish wrote:
       | 1456 items in Bitwarden; 1180 have both username and password but
       | there's _a lot_ of duplication - e.g. I 've got 6 items for my
       | local nzbget instance (all the same u/p combo.)
       | 
       | This is an accumulation since ~2010 starting with 1Password, then
       | LastPass, then Bitwarden.
       | 
       | [edit: 1339 items have a password but only 1180 of those also
       | have a username]
        
         | lukevp wrote:
         | Do you know you can add multiple URLs to the same un/pw and it
         | will autofill on more sites?
        
       | jeroenhd wrote:
       | Bitwarden lists 791. A ton of them are for internal
       | services/local dev accounts/what have you, but that's still a
       | pretty long list.
       | 
       | I don't use most of them. A third of them are for my spam email
       | address. I'm starting to notice Bitwarden taking its sweet time
       | decrypting them all, though.
        
       | crooked-v wrote:
       | The most infuriating auth-related thing for me is the companies
       | that insist on doing phone-based 2FA. I'm inextricably linked to
       | my specific phone number at this point in a way that previously
       | was only an issue with my email address.
        
         | willtemperley wrote:
         | This. SMS 2FA has been considered insecure by NIST since 2016
         | [1] and it's a major pain when travelling and swapping sim
         | cards.
         | 
         | [1]
         | https://www.theregister.com/2016/07/24/nist_says_sms_no_good...
        
           | tornato7 wrote:
           | The best solution is to create a Google Voice account and use
           | that number for 2FA
        
             | NoZebra120vClip wrote:
             | Many MFA implementations will detect and disallow the use
             | of VoIP numbers... for security reasons.
        
             | rtsil wrote:
             | Until Google decides to retire Google Voice...
        
       | neon_electro wrote:
       | 1,226 items in my 1Password database. Very happy customer.
        
       | morkalork wrote:
       | Shit, just looking at the replies, there's a solid case for
       | password managers. No normal human is going to memorize 100+
       | unique passwords meeting various complexity requirements. It
       | almost makes shaming people for re-using passwords look like
       | you're out of touch. Of course they're following bad practices,
       | how could they not be?!
        
         | causality0 wrote:
         | I take a pragmatic approach: the dozen logins in my life that
         | actually matter get strong unique passwords, and everything I
         | don't give a shit about gets the same password.
        
           | Misdicorl wrote:
           | I take the same approach with the extra precaution that those
           | logins also get a separate email address (with a different
           | pseudo-strong password). Makes it really easy to share
           | nonsense logins with my wife/family.
        
           | lwhi wrote:
           | It's not pragmatic, it's dangerous.
           | 
           | Sooner or later someone could take control of one of the
           | accounts you don't care about and use in a way you don't
           | expect to gain control of things you do care about.
        
             | Dalewyn wrote:
             | Beyond my accounts related to my important email addresses,
             | Steam, finances and medical which can all be counted on one
             | or two hands, I really couldn't give a damn about the other
             | accounts or their password security.
             | 
             | Strong and unique passwords for the important accounts,
             | simple and reused passwords for the rest. You're welcome to
             | hack into my accounts on Hacker News, Reddit, Discord,
             | LINE, various IRC networks, various forums, etc. I don't
             | care; there's nothing important in there besides
             | sentimental value.
        
               | ccooffee wrote:
               | On its own, the information in those private accounts is
               | probably not interesting. I used to use the "few sites
               | get a unique and secret password, but most reuse the same
               | 10 character one" ruleset, but I became worried about how
               | much data could be aggregated about me. By re-using the
               | same password, I felt like I gave a simple test that
               | attackers could use to definitively confirm "user XYZ on
               | site ABC is the same as ccooffee".
               | 
               | I'm now firmly in the "everything gets a unique password"
               | camp. There are 4 important passwords I type myself, but
               | everything else is in a password vault.
        
             | tppiotrowski wrote:
             | > use in a way you don't expect to gain control of things
             | you do care about
             | 
             | An example would really drive your point home. Can you
             | provide one that people would deem "dangerous"?
             | 
             | Edit: ccooffee just mentioned in the thread that you could
             | be de-anonymized by reusing the same password. Is this what
             | you mean? There's a spectrum of comfort with privacy so
             | maybe that's the source of the disagreement between whether
             | it is important to have unique passwords or not for
             | accounts that don't contain financial/SSN/medical/etc
             | information
        
           | whstl wrote:
           | I don't know if I agree. A password manager is more pragmatic
           | even for just a handful of accounts.
           | 
           | Whether it is safe or not, people can argue, but more
           | practical? It definitely is.
        
         | tzhenghao wrote:
         | This. And password managers can do more by constantly checking
         | latest account breaches like on https://haveibeenpwned.com then
         | flagging it to their customers to rotate their credentials.
        
         | daneel_w wrote:
         | There's a case for that even if you just have 5 important
         | accounts. If the account matters, give it a long random
         | password.
        
           | amanzi wrote:
           | There's an unfortunate correlation between how long and
           | complex my password is and how I often I have to manually
           | type it in. Microsoft are really good in this regard, and you
           | almost never have to type in your password once you have the
           | Authenticator set up. Google isn't too bad, once you're
           | logged in, but you still sometimes have to type out your
           | password in a situation where having access to your password
           | manager is not convenient. But I find Apple is the worst - I
           | often need to type in my password, and often in situations
           | where I don't have access to my password manager.
        
       | uguuo_o wrote:
       | Personal ~10 Work related maybe ~20
        
       | tananaev wrote:
       | 963 in Bitwarden
        
       | jimnotgym wrote:
       | Around 1,000 in 1password. I use 1password because many of them
       | are shared.
       | 
       | Edit. That is only my work 1pass. I have a personal instance too
       | with a few hundred.
        
         | pimlottc wrote:
         | I'm curious, do you actually have ~1,000 work-related accounts?
         | Or second accounts/alts for various non-work sites using your
         | work email?
        
           | jimnotgym wrote:
           | I have zero non-work sites on my work email.
           | 
           | Crazy isn't it. Not everything is a login, and not everything
           | is a password. There are keys in there for instance, and some
           | credit cards. The majority are logins though. Crazy, isn't
           | it.
        
       | colinmegill wrote:
       | 241 in 1password 340 in Google Password Manager
        
       | tzhenghao wrote:
       | I have over 300 on 1Password, some with more than 5 different
       | accounts from the same site like Google and Slack. I also lean
       | heavily on the 1Password extensions to help on the retrieval
       | part.
       | 
       | It's incredibly insane but I manage it by adding a namespace
       | postfix so it's easier to identify which when autocompleting
       | login forms. For example, "Google (Personal), "Google (UMich)"
       | etc.
        
       | gjsman-1000 wrote:
       | And I thought I was out of hand with 496 in 1Password... now it
       | feels quaint looking around here.
        
       | gnrlst wrote:
       | 600+
        
       | BaudouinVH wrote:
       | https://i.imgur.com/QHMavTm.png
       | 
       | 1078 - many I of them I've used once
        
       | alxjsn wrote:
       | 633
        
       | akira2501 wrote:
       | If I need to login to your site less than once or twice a year,
       | "Forgot my password" is my password manager. Personally, I feel
       | that the utility of me working to keep and maintain that
       | information in a database for high availability is essentially
       | zero.
       | 
       | As a result, I store very few accounts overall and checking out
       | as "guest" hasn't been a problem of any sort. There's like 10
       | critical things that I feel the need to store the password on and
       | they all use a hardware key for 2fa anyways.
       | 
       | For the two accounts that I absolutely can't lose access to, I
       | just used the "Correct Horse Battery Staple" method and came up
       | with two very long and secure passwords that I have no trouble
       | remembering.
        
         | a2128 wrote:
         | For websites I really don't care about, I just get a disposable
         | email on dropmail, and copy paste the email address to both the
         | email and password fields to save time. Surprisingly, some
         | websites check this and won't allow you to set your password to
         | your email, but removing the last character or adding a 1 at
         | the end works around it.
        
           | powvans wrote:
           | Why even go to that much trouble?
           | 
           | If it's truly a throwaway I just use an email address like
           | shitsinthewoods@mailinator.com, grab what I need, and go on
           | with my life. If I ever happen to need to login again, I'll
           | just send a password reset to the mailinator address and once
           | again carry on with life.
        
         | jay_kyburz wrote:
         | Yeah, I'm the same. Google and a few others. The rest all just
         | get the new password that Firefox suggests and I don't even pay
         | attention to what it is.
        
         | schainks wrote:
         | Rofl my reaction to this was the same as when a friend
         | complained about his todo system complications and I told him
         | "why not email yourself".
         | 
         | Simple and genius. Why am I managing all these extra
         | passwords?!
        
         | cheeze wrote:
         | I just use a crappy password. It's been leaked before. I don't
         | care.
         | 
         | If someone wants to take over my last.fm account that I haven't
         | used in 3 years, sure go for it.
         | 
         | The important accounts get a randomly generated password stored
         | in my password manager. And the really important accounts only
         | have half the password saved, I manually fill in the other
         | half.
        
           | Cannabat wrote:
           | I guess that's kinda fine, but there are at least two reasons
           | to not do this:
           | 
           | - Access to any of your accounts could make impersonation
           | easier. You might not be the one who suffers from whatever
           | they do. Or if they can assemble enough PII, you might
           | unexpectedly have a line of credit taken out on your name.
           | 
           | - Many websites use some form of federated login, or a
           | crossover kinda situation where you have a username/password
           | login that is linked to eg a Google account. Access to the
           | username/password account could open you up to an attack on
           | the juicy targets.
           | 
           | Personally, I'd rather none of my accounts are easily
           | compromised, but that's a pipe dream - it's not up to us to
           | secure the services we use. So best thing to do is just use a
           | good password.
           | 
           | It's easy these days to use a good password, though I
           | acknowledge still tedious/impossible to update all of your
           | services.
        
         | rhn_mk1 wrote:
         | A password manager is not just a way to manage passwords. It's
         | also a way to manage who holds your personal data, so you can
         | GDPR request them to stop.
        
       | MacsHeadroom wrote:
       | About 1,400 in KeePass.
       | 
       | Perhaps a poll would with ranges would have been better.
       | 
       | 0-100
       | 
       | 101-300
       | 
       | 301-800
       | 
       | 801-1200
       | 
       | 1200+
        
         | jeanlucas wrote:
         | Indeed, although it would not be that hard to parse all replies
         | and plot it.
        
       | Semaphor wrote:
       | Over 500, though I have no idea how many of them still exist. I
       | use a password manager and unique email addresses, why would I
       | care how many accounts I have?
        
         | hotpotamus wrote:
         | What are you using for unique email accounts? DIY or some
         | service?
        
       | c17r wrote:
       | According to Bitwarden, 479 accounts
        
         | distances wrote:
         | Hehe exactly the same number I have in KeePassXC, 479. I'm
         | pretty sure many of these services have shut down years ago.
        
       | throwaway019254 wrote:
       | 800 logins in my Bitwarden.
       | 
       | These are logins I collected over the last 15 years. A lot of
       | them are for pages that don't event exist anymore.
        
       | smcleod wrote:
       | Looks like I have 2160 in Strongbox (recently moved from
       | 1Password).
        
       | KronisLV wrote:
       | Around 300 at this point, sans any deleted ones. I don't think I
       | know a single password anymore, since they're all randomized and
       | separate for each site.
       | 
       | > Obviously, anything with OAuth is "bundled" into my Google
       | account.
       | 
       | Maybe it's just me, but I try to never use centralized identity
       | providers (outside of things that I really don't care about) and
       | use separate e-mail auth whenever possible, across multiple
       | e-mail accounts (some self-hosted). Same with considering
       | separate Google accounts for phones, services like e-mail, a
       | separate one for any content creation on YouTube and so on
       | (ideally without any of them coming in contact with one another).
       | 
       | The idea is that one account getting closed/suspended shouldn't
       | result in ALL of the linked stuff becoming inaccessible. I don't
       | even do anything weird online, it's just that nowadays you hear
       | lots of stories about people getting banned based on some
       | heuristics by automated systems, with no ways of getting in
       | contact with the support. Even something like a VPN might trip
       | those systems up. Similar things have happened to me before (a
       | SaaS provider didn't want to do business with me) for no good
       | reason even without a VPN, but trying a year later with the same
       | credit card didn't result in the other account being auto-
       | suspended. How odd.
       | 
       | I guess the next step would be to have usernames, phone numbers
       | and even payment methods (apparently virtual credit cards
       | sometimes work) also be more randomized and more
       | compartmentalized, though something tells me it'd be a pain to do
       | that. That said, I largely believe that privacy online is mostly
       | dead due to how much fingerprinting there is, though one can
       | still protect themselves from automated systems acting weird,
       | because nobody genuinely cares about that, at least at the scale
       | where they're needed.
        
         | CamelRocketFish wrote:
         | Agreed, enough horror stories have kept me away from using
         | Google as OAuth. The only value I see in it is as part of SSO
         | for employee accounts. Employee leaves and revoke access to
         | everything.
        
         | ThatPlayer wrote:
         | Not even banned, one of the games I play just put out an
         | announcement that Twitter login support might be dropped soon
         | because of Twitter's API changes, so you better associate your
         | account with email soon.
        
         | Froedlich wrote:
         | I have about 150 accounts, though some of them are logins for
         | vendors I dealt with once, a decade or more ago.
         | 
         | > I guess the next step would be to have usernames, phone
         | numbers and even payment methods (apparently virtual credit
         | cards sometimes work) also be more randomized and more
         | compartmentalized, though something tells me it'd be a pain to
         | do that. --- I do that. It's no trouble. I use various
         | usernames to 'fuzz' tracking. Yes, anyone who really cared
         | could track me by my IP address, but trackers are like whales
         | sieving krill; they get so much, they don't bother to look very
         | hard.
        
         | xp84 wrote:
         | > people getting banned ... with no ways of getting in contact
         | with the support
         | 
         | This is the most out-of-whack part in my humble opinion. Most
         | of us have a tremendous amount of data and things like auth
         | tokens tied up in Google, and Apple, and due to their scale and
         | the fact that at least for GOOG it's a "free service," they've
         | set the expectation up that "support" should be limited to
         | searching an FAQ, and also that any account they ban must be
         | some kind of troll account that shouldn't be listened to. God
         | forbid they give you a phone number where you could bother a
         | person until your problem was solved.
         | 
         | Using ad-supported services for vital stuff is risky. But I
         | know even Apple isn't very helpful, even for those of their
         | iCloud users who pay.
        
           | eastbound wrote:
           | Google cornered themselves: I'd never give my credit card to
           | Google. I switched to Apple precisely because I have my
           | emails in Google. Even if both had non-support, it's better
           | to at least not have to report credit card fraud against the
           | company who also has my emails...
        
       | bin_bash wrote:
       | 176 sounded so low to me I wasn't sure if you were talking about
       | for all sites or just HN alts.
        
       | tgv wrote:
       | 360 for websites (most of which I've only used once; the oldest
       | are dated 2011, but those are probably import dates, as they all
       | have the same timestamp), and 100 or so for more serious stuff
       | (banking, routers, etc.) in KeePassXC.
        
       | _benj wrote:
       | Before posting I was looking at the comments to see how bad I
       | was... after seeing 1k+ it seems like I'm fine with my 627
       | bitwarden items!
        
       | thom wrote:
       | 940 in 1Password (I feel a lightweight that I haven't hit 4
       | figures yet). Stopped fighting a while back and signed up to the
       | cloud version instead of just having Dropbox backups, partly to
       | help onboard my family better. Haven't regretted it yet,
       | obviously will do if/when I find out all my stuff has been hacked
       | but blah.
       | 
       | Don't have numbers for my work machine upstairs, but on my phone
       | here's how recently they were all used:
       | 
       | 1 Day: 1 2 Days: 1 14 Days: 3 30 Days: 3 60 Days: 8 90 Days: 6
       | 
       | So, mostly cruft. I have a lot of stuff still done via Google
       | auth, despite migrating all my domains and email to Fastmail
       | couple of years back (which has been flawless since). Also, just
       | checked, and I only have 27 entries in Authy.
        
       | simonjgreen wrote:
       | 1,742 according to my Bitwarden on Logins :grimace:
       | 
       | Given my use of password managers goes back to pre 2000 I'm
       | willing to bet a sizeable percentage of the sites don't even
       | exist any more
        
       | jeanlucas wrote:
       | 952, I store accounts user and passwords that I have since 2011,
       | and I like to try new services. Especially to give feedback to
       | makers.
        
       | insomniacity wrote:
       | So if anything with OAuth is tied to Google, how would you
       | survive losing your Google account?
        
         | firecall wrote:
         | For this reason I stopped using Google / OAuth a couple of
         | years back!
        
       | marssaxman wrote:
       | There are 92 entries in my credentials archive. I try to avoid
       | creating them if at all possible, and I never use OAuth.
        
       | moltar wrote:
       | 1000s
        
       | drakonka wrote:
       | I currently have 344 accounts in my password manager.
        
       | daneel_w wrote:
       | My keychain has 54 items in it. I think at least 5 of them belong
       | to things I've shut down.
        
       | jonathantf2 wrote:
       | 1Password currently has me at 476 logins, I assume some of those
       | are duplicate accounts or burners.
        
         | a10c wrote:
         | 593 for me in 1Password
        
       | purplecats wrote:
       | 1,101
        
       | sigio wrote:
       | about 750 in my personal 'pass' store, and about a 1000 in the
       | shared password store for work. Bitwarden probably has a
       | significant subset, but I prefer to keep 'pass' as authoritative
       | source.
        
       | thr0waway001 wrote:
       | Personal ones close to that. But as a contractor, way more than
       | than 176.
        
       | hhh wrote:
       | 600 in Chrome. 800 in iCloud Keychain. I assume there's a % of
       | duplication between the two, since I don't really use Chrome
       | anymore outside of Windows.
        
       | StopHammoTime wrote:
       | 636, and I lost a lot of them about 9 years ago.
       | 
       | I'm honestly surprised I'm not over 750.
        
       | [deleted]
        
       | ChoGGi wrote:
       | > Obviously, anything with OAuth is "bundled" into my Google
       | account. So if anything this is a huge underestimate.
       | 
       | If Google ever pulls the plug on you, you're in for a bad time.
        
       | achairapart wrote:
       | I really don't know how many accounts I have, for most of them I
       | don't even store passwords, I just generate them in a
       | deterministic way with a little password generator I made[0].
       | 
       | Some time ago I realized what a waste was to store so many
       | secrets, even more knowing that for the most part I'll probably
       | never need them again.
       | 
       | For the - proportionally few - important secrets, I use (and
       | really like) Pass[1].
       | 
       | [0]: https://aprico.org
       | 
       | [1]: https://www.passwordstore.org/
        
         | gnrlst wrote:
         | Aprico is a neat idea, but as soon as you face a website that
         | has _stupid_ requirements like a character limit, specific
         | banned characters (like symbols), or other it has no way of
         | adjusting for that and you have to start tracking exceptions.
         | It also has a 1-1 limit of website, unless you come up with
         | service naming heuristic as well. Regardless of these
         | limitations (which I realize are edge cases and very much not
         | the point of the service), it 's a nice, simple idea :)
        
           | achairapart wrote:
           | Anectodal from a few years of use, surprisingly those stupid
           | requirements are almost a thing of the past nowadays. But
           | yes, some edge cases still require some bits of muscle
           | memory, which may be your thing, or not.
           | 
           | I'm a bit ashamed that I never found the time to write down
           | some docs, so I never really shared it, apart from a few
           | friends and colleagues. On desktop, the web extension is
           | quite convenient, it will autofill everything for you but the
           | master password.
           | 
           | On iOS, I made a simple shortcut[0] where you share a url and
           | - thanks to the os autofill - you just get your password
           | copied into the clipboard, no input required at all. Also, on
           | Android there is something similar using the PWA Web Share
           | Target API.
           | 
           | And that's it, thanks for your kind words.
           | 
           | [0]: https://www.icloud.com/shortcuts/2dcb6680e6b3424d8708e67
           | 3e1a...
        
           | xp84 wrote:
           | Don't forget the even stupider variant, the allow-list of
           | like 5 symbols. "Tell me you failed infosec 101 without
           | telling me you failed infosec 101."
        
             | NegativeK wrote:
             | There's a local government website that requires eight or
             | fewer characters, and the eighth character has to be a
             | digit.
             | 
             | They've tried to change the requirement, but it comes from
             | vendor software. The vendor just waves around a middle
             | finger and points to the contract.
        
       | web3-is-a-scam wrote:
       | Hundreds. I've lost count they're all in 1Password.
        
       | snailmailman wrote:
       | Over 300 in a self-hosted vaultwarden. I've got my vault password
       | memorized but that's about it. All 300+ are secure randomly
       | generated ones that I do not know. And I've got 2FA stored there
       | too.
       | 
       | Despite the huge number of accounts, logging into anything is
       | seamless across any of my devices. And access to my vaultwarden
       | is securely protected. Password managers are great. Really
       | looking forward to vaultwarden eventually storing Passkeys as
       | well, and using passkeys to login instead.
        
         | an_ko wrote:
         | What's the point of 2FA if you store it in the same place as
         | the first auth factor?
         | 
         | Or maybe I've misunderstood. Are they behind different master
         | passwords or something?
        
       | snihalani wrote:
       | 1072
        
       | 1827163 wrote:
       | 182 logins here, although most of them aren't used frequently.
        
       | efitz wrote:
       | I have 921 items in 1Password; most of them are logins.
        
       | michaelmior wrote:
       | Bitwarden lists 1,601 for me. That's not counting sites that use
       | Google, GitHub, et al. for auth which I will often choose if
       | offered.
        
       | pps wrote:
       | 467, says my Bitwarden :)
        
       | Brajeshwar wrote:
       | 3,995 by 1Password as of May 21, 2023.
        
       | varenc wrote:
       | 1259 on 1Password!
       | https://dl.dropboxusercontent.com/s/4ug9qyk67z9pkml/Screen%2...
       | 
       | Still using 1Password 7 and its self-hosted vaults with the
       | 1Password app denied all network access.
       | 
       | This is good reminder that I should login to all my old Google
       | accounts to keep them from being deleted since Google is finally
       | making moves to erase accounts unused for over 2 years.
       | (especially given how it's always getting more difficult to
       | create new G accounts)
        
       | mfontani wrote:
       | 380+ logins on bitwarden
       | 
       | 45+ 2FA on Authy
       | 
       | 2 yubikeys
       | 
       | It gets... pretty confusing, especially as I've not checked the
       | gopass repo, where I keep _other_ stuff, too...
        
       | escapedmoose wrote:
       | 326
        
       | tkuraku wrote:
       | 241 logins in kepassxc
        
       | davidn20 wrote:
       | 515 - thank you Jesus for password managers
        
       | LorenDB wrote:
       | I have 93 personal accounts in my Bitwarden, plus 13 that I have
       | categorized as "deprecated".
       | 
       | I don't think 176 is wildly unusual; it may be a bit higher than
       | some people, but it's certainly not a Guinness World Record or
       | anything like that.
        
       | gepiti wrote:
       | Only 375.
        
       | rtsil wrote:
       | 1105 according to Keepass. Although at least a third of these are
       | no longer active.
        
         | johnorourke wrote:
         | woop another Keepass user!
        
       | aed wrote:
       | Interesting question! I just checked and, wow, I have 922
       | accounts in 1password. (From 10+ years of use.)
       | 
       | It's funny you bring this up because I've thought about "cleaning
       | up" 1password before. But all the extra accounts are not really
       | in my way.
       | 
       | I never use oauth (like to create a new account / password for
       | everything). All of my work-related accounts are in there from
       | several employers. Lots of passwords for (probably dead) servers.
       | I count 28 logins for salesforce.com from past employers, various
       | sandboxes, and consulting gigs.
        
         | ryan29 wrote:
         | > I never use oauth (like to create a new account / password
         | for everything).
         | 
         | Me too. I have 672. Lots are for accounts I set up for
         | nieces/nephews, etc., so those don't really count. I bet 100
         | are stale as well I'll clean them up one day. Lol.
        
         | kylehotchkiss wrote:
         | The archive feature is nice for cleanup. It doesn't delete,
         | just hides from lists and searches. I've un-archived many items
         | before.
        
       | KomoD wrote:
       | 939 accounts in 1PW
        
       | nickjj wrote:
       | $ pass | wc -l         321
       | 
       | 17 of those are encrypted notes (API tokens, license keys, etc.).
       | 
       | `pass` is a command line password manager:
       | https://www.passwordstore.org/
        
         | aendruk wrote:
         | $ gopass list --flat | wc --lines       575
        
         | zikduruqe wrote:
         | $ pass |wc -l          176
         | 
         | Was hoping to be the only cool kid posting pass counts... :)
        
         | sirodoht wrote:
         | I love pass!                 $ pass|wc -l         1252
        
       | extesy wrote:
       | 2151 according to Bitwarden. That's what 25 years of actively
       | using internet does to you :)
        
         | shmde wrote:
         | 2151 is insane. Share any fun/quirky/useful uncommon websites ?
        
       | [deleted]
        
       | ftxbro wrote:
       | this is nuts, i was expecting people to say like 8
        
       | sieabahlpark wrote:
       | [dead]
        
       | browningstreet wrote:
       | 944 items in 1Password (fingerprint me!)
       | 
       | I'd have more but even 1Password doesn't always catch when I'm
       | creating an account login, or resetting a password, etc. I do the
       | work to input some of them, but not always (I get lazy).
       | 
       | I do try a lot of tools, and I have a lot of personal and
       | professional GMail OATH logins too, which -- fortunately --
       | 1Password now tracks.
        
       | adontz wrote:
       | 183 after some recent cleanup
        
       | arisAlexis wrote:
       | You mean since I started using the internet in 1995? Or only live
       | ones
        
       | pt_PT_guy wrote:
       | 886 according to keepassxc
        
       | whstl wrote:
       | I'm probably the one with the least.
       | 
       | I have 35 in my password manager. I purge the ones I don't need
       | every 2 or 3 months. I even gave away GOG and Steam accounts to
       | friends after years of not playing games.
       | 
       | Sometimes I have to send a threatening email to delete some
       | accounts. Currently there's about 2 I'm waiting for an answer.
       | 
       | It's gotten worse lately: people just don't delete your account
       | anymore :D. Because of that, I use "hide my email" and put fake
       | personal data pretty much everywhere now. When I REALLY don't
       | care or am just checking the service, I use a burner email.
       | 
       | I honestly wish I had close to zero. I _really_ hate SaaS and I
       | really hate websites that require a login for stupid stuff
       | (like... a barbershop that needs login /password for scheduling
       | haircuts? fuck off).
        
         | lexandstuff wrote:
         | I'm confused about what you're fucking off. Would you prefer to
         | schedule haircuts via a call or an anonymous online form?
         | 
         | Being able to schedule appointments online is one of the big
         | wins of modern life imo: it beats waiting around on hold and
         | laboriously explaining to the receptionist how to spell my last
         | name.
        
           | rhn_mk1 wrote:
           | There are things that work anonymously (or at least
           | pseudonymously) already: pizza delivery or hotel booking.
           | It's not like the data presented at a random registration
           | form has to reflect your government ID. Skipping the login
           | step just saves the hassle, and preserves the win of being
           | able to do things online.
        
             | whstl wrote:
             | Exactly. Purchasing with a guest login works fine for most
             | shops here.
             | 
             | In this specific case I was talking about it's even worse:
             | I already have to click a link in the email (or answer an
             | SMS) to confirm the appointment. It's ludicrous.
        
           | justsomehnguy wrote:
           | > Would you prefer to schedule haircuts via a call or an
           | anonymous online form?
           | 
           | Why the hell no?
           | 
           | At worst "an anonymous form" can ask for your mobile number
           | only to remind you about the appointment (if it's not today
           | for example). At best it should be really optional. In both
           | cases there is absolutely zero need for both a login and a
           | password.
           | 
           | I have a local pizza joint working like that - you just punch
           | in what you need, your number with SMS code confirmation and
           | you are in, with your address/es and pizza coins or whatever.
           | And they have your number to contact you if anything is wrong
           | with the order/delivery.
           | 
           | Another one just asks for a number and call back to confirm
           | with an operator.
           | 
           | Why the hell I do need _a login, a password and
           | email|Facebook|whatever_ for a pizza delivery?
        
         | reaperducer wrote:
         | _a barbershop that needs login /password for scheduling
         | haircuts? fuck off_
         | 
         | If it takes reservations, it's not a barber shop. It's a beauty
         | salon.
        
       | deathtrader666 wrote:
       | 1300 as per 1Password.. and must be 500+ in my old Firefox
       | account that I didn't bother exporting.
        
       | aranke wrote:
       | 203 according to 1password, but I archive the ones I don't need
       | roughly every year.
        
       | dt3ft wrote:
       | What is bitwarden doing to help lower the number of accounts,
       | exactly? I'm out of the loop.
        
         | NegativeK wrote:
         | Bitwarden lowers the mental burden for secure (which includes
         | unique) passwords, precisely because we have a crap ton of
         | accounts.
        
       | nyadesu wrote:
       | 319, currently using Bitwarden to manage them and been pretty
       | happy with it so far
        
       | johnorourke wrote:
       | Why keep score? If you have a password manager, the number is
       | irrelevant. But: KeePass 2052. Cheating because I work for an
       | agency... so we have hundreds of clients' passwords to store and
       | selectively distribute to the team.
        
         | psychphysic wrote:
         | Agreed. This is utterly baffling question.
         | 
         | You might as well ask me how many grains there are in my salt
         | shaker.
         | 
         | Interesting academic question, but seeing so many people climb
         | on their soap box is wild.
        
       ___________________________________________________________________
       (page generated 2023-05-21 23:00 UTC)