this post was submitted on 19 Jul 2025
466 points (92.4% liked)

Technology

72988 readers
3010 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
(page 2) 50 comments
sorted by: hot top controversial new old
[–] vk6flab@lemmy.radio 191 points 1 day ago (9 children)

Here's the thing .. as crazy as a notebook with passwords sounds, it's not accessible to someone across the internet.

[–] 6nk06@sh.itjust.works 72 points 1 day ago (1 children)

Password managers check the URL before giving its data. A human being can be fooled into giving it to a fake web site.

[–] MentalEdge@sopuli.xyz 42 points 1 day ago* (last edited 1 day ago) (9 children)

TBF, they can be fooled too.

Bitwarden warns against using autofill on load for that very reason, as then simply loading a malicious page might cause it to provide passwords to such a site.

And then, a human when a site doesn't autofill, is more likely to just go "huh, weird" and do it manually.

[–] lmmarsano@lemmynsfw.com 2 points 20 hours ago

they can be fooled too.

Makes it harder: when I go to the wrong website, the manager simply doesn't suggest credentials (it does not have) for it. That causes me to wonder why.

Without a password manager, a user is never prompted to wonder. They'd simply not notice.

[–] Darkassassin07@lemmy.ca 18 points 1 day ago* (last edited 1 day ago)

You've always got the human element, bypassing security features; but extra little hurdles like a password manager refusing to autofill an unknown url is at least one more opportunity for the user to recognize that something's wrong and back away.

If you're already used to manually typing in the auth details, you may not even notice you're not on the site you were expecting.

load more comments (7 replies)
[–] acosmichippo@lemmy.world 2 points 22 hours ago* (last edited 22 hours ago)

but:

  1. way less convenient to generate dozens and dozens of unique, complex passwords. which means it’s less likely to be used/updated as much as it should be.

  2. not tied into MFA which is an additional layer of security and convenience

[–] vext01@lemmy.sdf.org 14 points 1 day ago* (last edited 1 day ago) (1 children)

Yeah, It's actually quite a secure way to store passwords, since it requires physical access.

I knew a guy who had a drawer full of slips of paper with passwords written on. He called it the "security drawer". Made me smile, but probably shouldn't have been advertising it.

load more comments (1 replies)
load more comments (6 replies)
[–] NauticalNoodle@lemmy.ml 2 points 17 hours ago* (last edited 17 hours ago)

I had one of these I got it around 15ya but I never used it. I remember liking a particular aspect of it as if I had a specific use-case in which it would be handy but I can't remember what that was. Anyways, I've been on the keepass bandwagon through multiple reboots of it's software lineage along with Keepass2Android and I am satisfied.

[–] cupcakezealot@piefed.blahaj.zone 35 points 1 day ago (2 children)

this is my internet password logbook

"sanrio spotty dotty diary"

[–] AppearanceBoring9229@sh.itjust.works 3 points 20 hours ago (1 children)

Silly, you just posted a picture of your key now everyone can access your passwords

load more comments (1 replies)
[–] TheGrandNagus@lemmy.world 64 points 1 day ago (17 children)

Honestly, a physical password book isn't a bad idea.

Not accessible via the internet, and in most cases if someone has physical access to your system you're done for anyway.

The main weakness it has is from a nosey flatmate, spouse, or child in the house.

[–] tiramichu@sh.itjust.works 35 points 1 day ago

Yep. My Dad in his late 70s uses this system and it works great for him.

People make fun of it, but for people with low tech literacy this is actually far better than having a mish-mash of solutions where some their logins end up automatically saved in iOS on their phone, some are saved in Chrome on the desktop, some are just in their head, they don't know where anything is, and are constantly losing access and resetting credentials all the time.

And it definitely reduces the burden on me of parental tech support, when its all in the book.

[–] DJDarren@sopuli.xyz 11 points 1 day ago

My Mum died recently and my step dad is shit with tech, so their password book was invaluable in helping us gain access to her Apple account and her phone. It meant we were able to get to her iCloud passwords, so now we have access to everything.

So yeah, password books are actually pretty handy.

[–] lmmarsano@lemmynsfw.com 1 points 20 hours ago

The main weakness

is it's a pain in the ass.

  • Won't generate strong passwords.
  • Won't fill out login forms for me.
  • Manual, slower search and copying (worse for dyslexia).
  • Increases risk of submitting credentials to wrong site/app (especially malicious ones).
  • Increases error of mistyping credentials.
  • More effort to back up & retrieve.
load more comments (14 replies)
[–] flop_leash_973@lemmy.world 14 points 1 day ago* (last edited 1 day ago)

My mother uses something similar to keep track of her passwords for everything. While I prefer a password manager like Bitwarden or Keepass. I would rather her use a note book like this over something like Google or Apples password managers.

Or even worse, the same password for everything.

[–] ansiz@lemmy.world 19 points 1 day ago (1 children)

Sure, it's a horrible idea in an open office environment but if someone wants to use this at home for all their passwords it really won't hurt anything.

[–] Ebber@lemmings.world 3 points 23 hours ago* (last edited 23 hours ago) (1 children)

Especially when helping your parents living in the middle of nowhere.

Seeing them struggle with the changes happening in the last few decades, makes me worry what I'll be like when i need some young whippersnapper so that I can pay via personal, irrational, conditional thinking.

[–] pinball_wizard@lemmy.zip 2 points 21 hours ago* (last edited 21 hours ago)

makes me worry what I'll be like when i need some young whippersnapper so that I can pay via personal, irrational, conditional thinking.

Sometimes I share this fear.

But then I think - I'm on Lemmy, so I think "I'm still hip to new jazz."

But then I remember that Virtual Reality will (probably) be commonplace someday, and something somewhere will require it - and I know in my heart that I'll complain loudly about it before, during, and after I (demand that my grandchild) use it (for me).

[–] bigbabybilly@lemmy.world 26 points 1 day ago (3 children)

Oh yeah, this is for my in-laws. This is peak boomer tech right here.

load more comments (3 replies)

So... It's a password book? Like, pen and paper?Not the best choice for storing passwords, but I'd be more willing to do that than trusting Amazon not to hold my passwords hostage with a digital service by them.

[–] BlackPenguins@lemmy.world 18 points 1 day ago (2 children)

That Web Addresses placement is killing me.

load more comments (2 replies)
[–] aceshigh@lemmy.world 6 points 1 day ago

That’s exactly what I use. Chances of my house getting robbed is small. Chances of yet another data breach is very high - this year my data was breached at least 2ce that I remember.

[–] CallMeAnAI@lemmy.world 25 points 1 day ago (8 children)

Best option for non techies at home.

load more comments (8 replies)
[–] logicbomb@lemmy.world 19 points 1 day ago (6 children)

This isn't even weird.

I think most security experts would recommend that you have your most important passwords written down somewhere, and then hopefully locked up in some safe or deposit box somewhere. You don't need to buy an entire book for it, but some people like to spend money.

If this is for your less important passwords, then for the most part, writing them down is actually better. You won't be as tempted to reuse your banking password for your social media. And some people like writing things down. A password manager is a better solution, but lots of people aren't as good with technology and if they even let the browser remember it, they won't know how to retrieve it later if they want to use a different computer, for example.

load more comments (6 replies)
load more comments
view more: ‹ prev next ›