Signing back into the Community for the first time? You'll need to reset your password to access your account. Find out more.
Forum Discussion
pmallonee
2 years agoOccasional Contributor
Password Generator Improvements
I really enjoy using the password generator. I prefer using the "Memorable Password" both because I think length is more secure than complex and because I still sometimes have to type passwords.
...
pmallonee
2 years agoOccasional Contributor
There are enough websites where the autofill and save don't work that it has become my habit to work around it.
For example I recently went through creating a Wordpress account with accompanying website. The password entry was on a separate page from the username and the "Save in 1Password" was not offered. In addition, because of the password rules mismatch, saving the password would be done ahead of whether the website accepted the password. It's just easier to copy the proposed password so that it can be pasted in the password field and in the 1Password field.
My Bank of America app still has a lame password because 1Password refuses to fill it and I always have to type it (Android). Synchrony bank (store cards) fails every time (web) on autofill but I can copy and paste the password. Federal savings bond accounts are strictly "No Paste". Those have to be remembered and typed.
I also use the password generator to fill in "Security Questions". Those "What is your favorite color" questions are about the stupidest form of security I can imagine. By generating a phrase in the password generator I can enter a sequence that an AI scanning of Facebook isn't going to guess at. Even on those I ran into a 20 character limit on a retirement website.
Actually productizing security questions is probably a different worthwhile effort.
At least with my Samsung keyboard I can get to most of the characters relatively easily. An Apple keyboard would be a nightmare with those high symbol count passwords. And again, I prefer length where possible for security.
By all means if the password generator can consume a website offered set of password rules that would be appreciated.
I would ask if you though about putting in a 2 Factor Authenticator into the app version. That would be a cool autofill. Unfortunately, getting websites to adopt proper 2FA instead of texts and emails means that is still a ways out.