How to keep BitcoinTalk account safe and secure and how to use 2FA on account.

[dkbit98]

Here my question is how to keep password safe so that we don't forget it.

Don't try to remember all your passwords, this is impossible to do and human memory is not reliable.
Instead you can use some open source password managers like KeePass and remember only master password.
Than you can use KeePass to generate and save strong password.

How to activate 2FA on the account? I have heard in various articles and youtube that enabling 2FA on account makes account much more safe and secure.

It's more important not to click on any links you receive from other members in PM.
Remember to save backup of 2FA if you are using it, KeePass can also be used for this.

[EarnOnVictor]

I have seen many members in the forum who are not able to access their accounts and the accounts have been hacked. There are many others who are unable to access their account due to their correct password i.e. they have forgotten those passwords. Here my question is how to keep password safe so that we don't forget it.

I simply do not know why people are so forgetful about their passwords. If you are such a person, why not use common occurrences around you for the password but mix the upper and lower case? I see that simple enough. You may also write your password down somewhere and keep it safely just as you would do for your Bitcoin phrases.

I also read people advising you to keep your password through a third-party management online, I don't encourage that, I've heard enough of password compromise and that may be one of the reasons, just don't trust the internet for anything. However, if your account was hacked, why not use the email power to reclaim it back. This can also help you recover your lost password.

[Cricktor]

I also read people advising you to keep your password through a third-party management online, I don't encourage that, I've heard enough of password compromise and that may be one of the reasons, just don't trust the internet for anything.

A password manager isn't necessarily an online service, though such exist and make cross-device synchronization a lot easier. If such online password managers are made with security in mind, at least at the very basic level, they only store and sync an encrypted password vault which is only decrypted on your local device. Of course you have to trust the service that only you have the decryption key.

Another approach are locally installed password managers where the password database is synced with other tools across devices. There are good open-source solutions for this.

However, if your account was hacked, why not use the email power to reclaim it back. This can also help you recover your lost password.

If your bitcointalk account is hacked, the hacker can change the email address. After your own email address has been replaced, you can't easily reset or recover your account anymore. Your only chance to reclaim your account is a staked Bitcoin address or signed PGP message. And this will also take some time in which the abuser of your account can do nasty stuff and flush the reputation of your account down the toilet.

2FA as an additional security measure should make a takeover of your account due to password phishing or simply utterly bad human passwords a lot harder.

It's essential to learn to spot and not click on phishing links.