For those that store your information on an online manager

[promise444c5]

I do not use Flash Drive, LastPass, or anything to store my passwords and send phrases. I got a hardware wallet from my friend, and I wrote the seed phrases on a piece of paper, which I safely stored in a secure place. I kept another copy in case I lost it. I try to remember my passwords. In case I forget, I always use the forgot password option.

Well hardware wallet looks more secured.. private keys  could be prone to typos though because of chars combinations and how long a single one can be ~ 64char (you need to be careful incase you're storing private keys) but Seed phrase works better just writing it down with a multiple write out backups as well..
Passwords can be a tedious task to write down most times, especially if you're using a long combination, using a flash drive works best for me, just make sure the device you will be plugging it into is not compromised and have multiple backups  and still encrypt it with a private key if necessary. Hence, unless you're using similar combination over and over then mastering it offhand won't work... can't really say though but I don't think you can master 20 different passwords with  each with different combinations

[khaled0111]

Hence, unless you're using similar combination over and over then mastering it offhand won't work... can't really say though but I don't think you can master 20 different passwords with  each with different combinations

Do you mean using different variations of a base password, like adding a number and incrementing it for each service? While this might make it easier to remember your passwords, I wouldn’t recommend doing it. If one of those passwords gets compromised/leaked, it won’t be hard for an attacker to realize that you’re following a certain pattern, making it easy for them to guess all your other passwords, which could lead to the compromise of all your accounts which is something you don’t want to happen.

[promise444c5]

Do you mean using different variations of a base password, like adding a number and incrementing it for each service? While this might make it easier to remember your passwords, I wouldn’t recommend doing it. If one of those passwords gets compromised/leaked, it won’t be hard for an attacker to realize that you’re following a certain pattern, making it easy for them to guess all your other passwords, which could lead to the compromise of all your accounts which is something you don’t want to happen.

Sure it isn't.. I don't know what pattern OP might be following here but all I know is for him to be able to master all his password offhand  th3n there must be something like repetition .multiple times  unless OP does not use more than 5~10 services  ( will even still take some time to master without making any mistakes) which I don't think it's possible.  

[ThemePen]

LastPass security problem has been happening again and again since 2021 or 2022 and it is very worrying to see that it has affected many people to lose a lot of money. By the way people were warned they kept using online password manager and as result hackers were able to get access to important information. It is very disturbing to learn that recent theft of 283 million XRP from Chris Larsen personal accounts in January 2024 was caused by problem with password manager and that is huge amount. It is hard to believe that someone would store secret codes to millions of dollars worth of cryptocurrency in online manager especially one that has already been hacked. This incident is alarming strong reminder of how important it is to make security a priority and to use safer ways to store sensitive information.

[God Of Thunder]

What do you say? You got the hardware wallet from a third party, was it actually new or old? If it's old, you'll have to be in a lot of tension about the security of the Private Phrase. Even that was your close friend.
By the way if you purchase the new unboxed via your friend let me know the process I want to also have one for experiencing and empowering my holding fund.

Well, I cannot disclose who that friend is. But I trust him a lot. He unboxed it, but he did not use it because he had a couple more Safepal hardware wallets. After I received the wallet, I charged it first and then erased everything. I don't think he knows enough coding to manipulate it. Since this is an air-gapped hardware wallet and there is no internet connection, I don't think he has any way to access my seed phrases. However, he is someone I would trust with all my wealth.

And then my one question to you is, what do you do when you are away from that place and need access to that wallet if you have physically stored the private phrase?

I do not use it daily, so I don't need it daily. I moved some BTC and some USDT into it, and I will use them once a year. That is the plan so far.

[Crypto Library]

Well, I cannot disclose who that friend is. But I trust him a lot. He unboxed it, but he did not use it because he had a couple more Safepal hardware wallets. After I received the wallet, I charged it first and then erased everything. I don't think he knows enough coding to manipulate it. Since this is an air-gapped hardware wallet and there is no internet connection, I don't think he has any way to access my seed phrases. However, he is someone I would trust with all my wealth.

Dude I am not asking you to disclose your friend to me  .

I was just asking if you to know the process if it was newly unboxed. Because I have been wanting to buy a hardware wallet for a long time and you know what the current status of cryptocurrency or these related devices is in our country. So I asked you this question mainly to know from where it would be good or trusted to purchase. Maybe you misunderstood.

And when you are talking about faith here, I have nothing to say here, but keep in mind that human nature is definitely can changeable, this is what I will say to you as a local mate. And besides, people use hardware wallets to hold large amounts of funds, so more caution should be taken here.

I do not use it daily, so I don't need it daily. I moved some BTC and some USDT into it, and I will use them once a year. That is the plan so far.

Same question -

And then my one question to you is, what do you do when you are away from that place and need access to that wallet if you have physically stored the private phrase?

You may need to change your location and go to that location again, then you will be able to access. 

[OcTradism]

I was just asking if you to know the process if it was newly unboxed. Because I have been wanting to buy a hardware wallet for a long time and you know what the current status of cryptocurrency or these related devices is in our country. So I asked you this question mainly to know from where it would be good or trusted to purchase. Maybe you misunderstood.

If you want to know more about hardware wallets, what are good, and  how to purchase a hardware wallet a right way, I introduce you two topics. Your concern makes sense because if you don't know a proper way of purchase, and lack of ability to check it, you can buy a fake hardware wallet with something like backdoors. It's bad when you spent money but your bitcoin can not be secured, but stolen instead.

[GUIDE] How to buy a Hardware Wallet the right way
[LIST] Open Source Hardware Wallets.

[348Judah]

I may not blame some of these victims that much for lack of knowledge, what they are ignorant of can cost them, in which this is a perfect example, we have to be informed, because one of the conditions that warrant is leaving the use of a centralized system in financial economy was because of the way they have access to our private information and use them against us later, saving in any kind of online platform, password manager or any form of centralized institution is like you going back to banks and governments or hackers to have access to your account and portfolio in crypto, this is just the way it all interpret to me, some see this as a red flag and some never thought of it in that same manner.

[God Of Thunder]

So I asked you this question mainly to know from where it would be good or trusted to purchase. Maybe you misunderstood.

You cannot buy any hardware wallet from Bangladesh and you cannot even import. If someone comes from abroad and takes the risk to bring a couple of them, then you can buy from them. Don't you remember that one of our local mates wanted to take the order and purchase a dozen of safepal hardware wallet? It was nothing secret. He posted that in public. I got that from him. He sent it to one of his University friends, and then his friend sent it to me. If you want to buy, you can ask him if he can manage.

You may need to change your location and go to that location again, then you will be able to access. 

That is the only way to access your wallet. So, I thought it is self explaining already. If I ever need to access my wallet, I have to come back to my home or carry it with myself.

[Wiwo]

I may not blame some of these victims that much for lack of knowledge, what they are ignorant of can cost them, in which this is a perfect example, we have to be informed, because one of the conditions that warrant is leaving the use of a centralized system in financial economy was because of the way they have access to our private information and use them against us later, saving in any kind of online platform, password manager or any form of centralized institution is like you going back to banks and governments or hackers to have access to your account and portfolio in crypto, this is just the way it all interpret to me, some see this as a red flag and some never thought of it in that same manner.

Every newbie has their own unique experience of all this ugly past which has made up for their experience, so yeah we all have that bad past where due to lack of knowledge we made some mists that cost us a lot.

But as time goes on and our knowledge increases, we become more cautious in our steps as regards how we treat our securities and other personal aspects of our financial life that could leave us vulnerable to bad actors, taking our security as a top priority makes us independent and secured.

[RockBell]

I may not blame some of these victims that much for lack of knowledge, what they are ignorant of can cost them, in which this is a perfect example, we have to be informed, because one of the conditions that warrant is leaving the use of a centralized system in financial economy was because of the way they have access to our private information and use them against us later, saving in any kind of online platform, password manager or any form of centralized institution is like you going back to banks and governments or hackers to have access to your account and portfolio in crypto, this is just the way it all interpret to me, some see this as a red flag and some never thought of it in that same manner.

Some things is not about ignorance but laziness because how do they even trust their device so much that they want to save their password on them and it is even better to just get a book and a pen because if not that you are exposing your book there is no way that anyone will have access to it but people think everything is old fashioned if not doing something manually is much more safer than trusting your device with valuable information.

When it comes to the financial system it will be better for them to be centralized because of the level of scams but this will make it easier for the officials to actually track people it as it's own advantage and the fact that it not bitcoin they can do what ever they want with the financial process but leave bitcoin alone and they are, trying to centralize it but it will be very difficult for them to do.

[FinneysTrueVision]

Password managers are a huge convenience, and overall I believe it is better to be using them than not, as it avoids having to reuse the same password across every website. The mistake people make when using them is thinking that they are a fullproof solution and putting millions of dollars at risk by trusting them with keeping their wallet seeds safe. This is never a recommended solution, but at the very least, these people should have been using a passphrase that is kept offline in case there wass a security breach.

[knowngunman]

Some of these news are narratives pushed to divert attention. Why has this side of the story not emanated since? Why should I agree that a cold wallet's password holding millions of dollars was stored in a password manager. Anyone can suggest, speculate or say anything, but I don't believe the narratives in OP.

I don't have any evidence to refute the Op narrative but I also find it hard to believe there's no agenda at play here. HTH do we believe someone of that class who is well aware of consequences of storing private keys online could make that silly mistake with a wallet containing millions of dollars. It really sounds weird to believe tbh. Suppose it was a newbie, that would be understandable if they make such mistake but for an expert to store keys in online manager is like deliberately forfeiting their assets.

By the way, I'm curious why people react with a laughing emoji on the screenshot shared in the Op post. Have they lost human empathy? Someone lost millions of dollars and they find it funny? 

[libert19]

I used to use lastpass, once I came to know about it's hacks, I moved to offline password managers (Keepass and Password safe) and also use paper backups, I have learned to never ever trust Internet based password manager again from lastpass incidents.

...And because of that, an idea just came to my mind. Do devices like hardware wallets but for passwords exist? that you plug in and log you in your accounts? and, if they exist, why aren't they so popular as to have reached my ears by now?

Yubikeys [1] exist and they work pretty much like HW, but they work only for 2FA afaik.



[1] https://youtu.be/UxOvQWjJa_M

[avp2306]

I used to use lastpass, once I came to know about it's hacks, I moved to offline password managers (Keepass and Password safe) and also use paper backups, I have learned to never ever trust Internet based password manager again from lastpass incidents.

Its been so long since I use that password manager and those data breach happened to it make me wonder if we could still trust them.

Right now I used notepad for not so important accounts.  But for securing important password like passphrase and exchange username and password I use my notebook for that matter since I believe this is more safer rather than continue to use those apps created by some people. Since I believe this is prone for any potential attacks.

[libert19]

I used to use lastpass, once I came to know about it's hacks, I moved to offline password managers (Keepass and Password safe) and also use paper backups, I have learned to never ever trust Internet based password manager again from lastpass incidents.

Its been so long since I use that password manager and those data breach happened to it make me wonder if we could still trust them.

I don't trust anything that has been breached once tbh, only exception being exchanges if they reimbursed funds after being hacked.

Right now I used notepad for not so important accounts.  But for securing important password like passphrase and exchange username and password I use my notebook for that matter since I believe this is more safer rather than continue to use those apps created by some people. Since I believe this is prone for any potential attacks.

I like to think password managers that doesn't require Internet access at all, should be safe to use since data never leaves your device, it can not be hacked.  It's pretty similar to notebook or even better since for your data to be siphoned off, person will need physical access to your device and password to unlock vault as well.