[kwlug-disc] 2FA Google Authentication and Best Practices with passwords

[CrankyOldBugger]

I use the Google Authenticator for both gmail and my own NAS box, which
thankfully had a 2FA tie-in to GA.  But, yeah, it's tied to my work phone.
However if I can get to my Google account settings (which theoretically
shouldn't be too hard) I can switch the GA over to my personal phone if
necessary.  In fact, the GA used to be on my personal phone but I don't use
that anymore (it sits in the dock and forwards any calls to my work phone),
so I set up GA on the work phone.  As far as 2FA apps go, GA is 'ok' to
use.  I've seen worse over the years.

As to passwords, I use BitWarden inside my Chrome browser (as an add-in).
I really like BitWarden, having been frustrated by numerous other password
managers over the years.

My wife knows how to use BitWarden on my desktop, so should anything happen
to me, she can get on to all of my online accounts and do whatever.  As a
backup, I printed off my system access passwords and stuck it in the house
safe.  So if something should happen to me and my desktop gets powered off
and needs login creds, she's covered.

And finally, I have a little desktop sign that says "I'm only here for the
Wi-Fi" that sits on my bookshelf.  On the bottom of it I stuck a label with
the wi-fi passwords.  So if anything should happen to me the multitude of
mourners who come to the wake can still use the wi-fi....

Work, on the other hand, is on their own if they lose me.  Good luck to
them.



On Fri, Feb 4, 2022 at 6:22 AM Darren Pond <pilotpond at gmail.com> wrote:

> Good Day KWLug
> Going down the rabbit hole of password management.
>
> Seeking Best practices with documentation & Password?
>
> I recently cracked my cell phone display losing access to it.
> At last I was prepared for this as just the previous weekend I had updated
> my password collection, 190 and counting which I keep on a Libr spreadsheet
> in KDE Linux vault and second paper copy at my brothers house.
> Long story longer. When my father passed away last January he also was
> attempting to keep track of passwords. Only his mental state had both
> slided & his method of recording was totally random and has taken months to
> clean up.
> Or another simple issue is my not so tech friendly wife should also have
> access to PW's
>
> What is everyone doing about Passwords and documentation?
>
> This new to me Google Authentication at first look was ok seems like a
> good idea.
> Until you lose access to your cell phone or consider how your Personal
> Executors and Powers of Attorney family members will tackle your asset and
> find all the information that we deemed Password worthy.
>
> Yes I know its possible to access bank accounts with brick n mortar via a
> paper documentation. If you have lots of personal cash flow, time and you
> actually live in the same province as the family member, but what about all
> those other accounts that need to be dealt with?
>
> The Google Authentication 2FA is pain to me as I want to use my Desktop
> KDE linux with a nice large screen and keyboard instead of being pulled
> back to the cell phone each time.
>  Once I open the program that I need the 2FA its a struggle to get back to
> Desktop to continue to work.
>
> Any workarounds on KDE Linux I should be exploring?
> Keepass also looks like a convenient option for not so important PW that
> we use all the time. Still have yet to figure out how to get it to work on
> KDE and Firefox.
>
> Is Yobikey a solution or is this just another weak link in cyber and
> social security. like oops I lost the key. Or does any know where dad may
> have left the key.
>
> Side Note any KWlug KDE users out there that have time to hold newbie hand
> and field the occasional question?
>
> Darren
> _______________________________________________
> kwlug-disc mailing list
> kwlug-disc at kwlug.org
> https://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://kwlug.org/pipermail/kwlug-disc_kwlug.org/attachments/20220204/d9670c51/attachment.htm>