Ask HN: What is the best password management guide for 50 year olds?
Password management is hard, but my parents really have a hard time following/remembering the basics. I am looking for a fool proof guide that I can print out and add it to the fridge for my parents to follow. Beyond passwords, a guide around avoiding scams/phishing/etc.
6 comments
Print out a tabular sheet of
Paper is safer imho. I'd love to take him to a password store but he's ipad and integrations are poor. The built in Keystore is fine: he just forgets which ones he's reused. Chrome does good checks if you love Google.
2FA needed. I wish it wasn't SIM/txt but for now it's all I can reliably get him to apart from Apple "check trusted device"
Distinct pw per account is increasingly vital. Seniors have shitloads of risk in their pension banking and related.
Website name | account name | password | Date last changed | Notes (check qs and additional login info)
Paper is safer imho. I'd love to take him to a password store but he's ipad and integrations are poor. The built in Keystore is fine: he just forgets which ones he's reused. Chrome does good checks if you love Google.
2FA needed. I wish it wasn't SIM/txt but for now it's all I can reliably get him to apart from Apple "check trusted device"
Distinct pw per account is increasingly vital. Seniors have shitloads of risk in their pension banking and related.
Yeah, I am also leaning towards a printed out sheet. The issue is using it across different devices and on mobile they end up being stuck without a password. I like how Google and Apple lets you configure a backup email/account, which has been useful to get the alerts if they try to change their password for example.
2FA on Google also mandates a set of ten one time backup codes. Print it out, keep it safe. Perhaps one to physically escrow for them. Or, you can help them prime bitwarden on your machine, but they have the password not you and its also off-line sealed envelope in their or some escrow's hands.
Or go the whole hog and m of n it
Or go the whole hog and m of n it
What does being ~50 years old have to do with anything? I'm 50 and I'm the one who designs and implements those login screens, password managers, authentication databases etc etc...
The actual question is why haven't we solved authention in a way that would work for most people? Passwords suck. Webauth sucks. Two-factor sucks more than you can ever imagine. There isn't a way to authenticate that wouldn't suck for normal people (apart from password-less one-time sessions but those don't solve most auth problems).
That said, what's wrong with the time-tested way of Post-IT notes? No, it's not secure but it's one of the only ways that actually works with normal non-autistic people. Or like @ggm said above, a paper with login codes attached to their fridge with magnets. It just f*cking works.
The actual question is why haven't we solved authention in a way that would work for most people? Passwords suck. Webauth sucks. Two-factor sucks more than you can ever imagine. There isn't a way to authenticate that wouldn't suck for normal people (apart from password-less one-time sessions but those don't solve most auth problems).
That said, what's wrong with the time-tested way of Post-IT notes? No, it's not secure but it's one of the only ways that actually works with normal non-autistic people. Or like @ggm said above, a paper with login codes attached to their fridge with magnets. It just f*cking works.
It does seem like paper notes are a good reliable option.
Thanks for pointing that out - I don’t mean all 50 year olds struggle with this problem. I guess it is more accurately described as a solution for parents that are depending on their kids/others to give advice/guidance on digital stuff.
The issue with the paper system comes in when they sign up for new things on mobile and they don’t have the paper at hand. It also becomes messy for password changes. And now that we are trying to force them to use unique passwords per service, the list becomes really long! Especially if it is for both parents. Across banking, utilities, social media, paid television, ecommerce, ebooks, etc they have at least 35+ accounts to manage each. They also struggle with their vision which means it needs to be written out in quite large font.
But the main issue I have actually is beyond password management. It is perhaps better classified as general digital security and online identity management. For example, if they use the paper password system I know for a fact they will snap a picture as a backup if I don’t tell and remind them not to do so…
The other issue with the paper system is that there is no good backup. And backups they certainly need!
I totally agree that authentication is general is not solved.
Thanks for pointing that out - I don’t mean all 50 year olds struggle with this problem. I guess it is more accurately described as a solution for parents that are depending on their kids/others to give advice/guidance on digital stuff.
The issue with the paper system comes in when they sign up for new things on mobile and they don’t have the paper at hand. It also becomes messy for password changes. And now that we are trying to force them to use unique passwords per service, the list becomes really long! Especially if it is for both parents. Across banking, utilities, social media, paid television, ecommerce, ebooks, etc they have at least 35+ accounts to manage each. They also struggle with their vision which means it needs to be written out in quite large font.
But the main issue I have actually is beyond password management. It is perhaps better classified as general digital security and online identity management. For example, if they use the paper password system I know for a fact they will snap a picture as a backup if I don’t tell and remind them not to do so…
The other issue with the paper system is that there is no good backup. And backups they certainly need!
I totally agree that authentication is general is not solved.
On mobile, the old person I know (the one using the Rolodex s-3000) relies on their device (iPhone) to store credentials.
I think sometimes they also write passwords in the Notes app. I think that's in case they use their home computer instead of their iPhone.
I think sometimes they also write passwords in the Notes app. I think that's in case they use their home computer instead of their iPhone.
Fifty isn’t old, youngsters.
Use a password manager. Let it generate and remember passwords. Built-in to MacOS/iOS/iPadOS, including MFA. I switched my parents to iPads a few years ago, terminating my frustrating pro bono IT support contract with them.
1password seems good. I like that I can be a backup to help recover the account for them. This is a strong option, but I suspect they will struggle to keep switching between the app, 1password and MFA app to just login…
You're probably right, they may struggle, but they'll learn.
I had a similar issue with my parents.
The most common problem is signing up for new services on their phone. On their Windows computer, in a web browser, their password manager's browser extension is great at suggesting generated passwords and saving new accounts. But on mobile it takes a few steps and app switches, which they don't love (and one parent forgets and often has to go to the other for help).
Logins are usually well integrated (my family uses iOS, and Dashlane; I assume 1password works just as well)
I had a similar issue with my parents.
The most common problem is signing up for new services on their phone. On their Windows computer, in a web browser, their password manager's browser extension is great at suggesting generated passwords and saving new accounts. But on mobile it takes a few steps and app switches, which they don't love (and one parent forgets and often has to go to the other for help).
Logins are usually well integrated (my family uses iOS, and Dashlane; I assume 1password works just as well)
My dad locks himself of accounts on a weekly basis. Paper is the only system that is anyway reliable. Ultimately, the only 100% system is me, although not always convenient.
He used to manage fine when he could use the same password for everything but alas those days are gone.
Funnily enough I had to hack into his account last week since he was locked out and the only way back in was a phone call to the bank which I was able to make and answer every question required for a reset. It was basically standard name address and date of birth stuff.
He used to manage fine when he could use the same password for everything but alas those days are gone.
Funnily enough I had to hack into his account last week since he was locked out and the only way back in was a phone call to the bank which I was able to make and answer every question required for a reset. It was basically standard name address and date of birth stuff.
[deleted]
I know an old person who uses a Rolodex S-3000.
Seems to work well for them.
Seems to work well for them.