Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Don't rely on Google. The company has proven to be unreliable again and again, and their interests (as an advertising company) cannot align with yours, as a user and a citizen.

I advise to

- get your own domain for cheap. I have <lastname>.contact for a few $ and I'm happy with it.

- find a trusted email service provider (e.g Fastmail) to host your emails. This allows you to change providers at any time, without the need to inform all your contacts. I just switched from Protonmail to Fastmail and the move took me a minute or two, and I had to do nothing except change the domain configuration and use the Import tool to transfer the messages, calendars and contacts.

- Choose a good open-source synchronizing tool such as Syncthing (fabulous!) and if non suits your needs, fall back onto a reliable cloud service (e.g Dropbox).

- Pick a good, open-source password manager (I use KeePassXC) and sync it across your devices with the tool you just chose. Syncthing is perfect for me because KeePassXC can easily merge any conflict in a single click and I have all my databases available on my devices. You can save them in separate folder if you don't want to have your passwords available on, say, your personal and work devices. Tip: KeePassXC can open and unlock multiple databases at once: https://keepassxc.org/docs/KeePassXC_UserGuide.html#_automat...

The benefit of a password manager is that you can

- track all your account in one place, e.g which address is associated with which service

- audit your passwords (strength, uniqueness…)

- review each entries history (revert to old password, recall old logins…)

- store data related to your accounts (member ID, personal notes…)

- attach files (I'm saving some QR code in my databases, for loyalty card for instance)

- keep misc confidential info such as digicodes, credit card details, Wifi passwords…

I don't know any of my passwords except those of my devices and of my passwords databases. I let the manager generate them for me and make sure I have multiple backups of my databases.

I also use andOTP for 2FA codes, to separate them from the passwords. But andOTP support auto backups so I can quickly restore everything if I ever lose my smartphone (backup secured with OpenPGP, whose password is stored in KeepassXC of course).



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: