1736
IT support work be like (lemmy.world)
submitted 2 years ago by to c/lemmyshitpost@lemmy.world
203 comments fedilink hide all child comments
 
you are viewing a single comment's thread
view the rest of the comments
[+] 155 points 2 years ago* (last edited 1 year ago) (3 children)
[deleted]
  • permalink
  • fedilink
  • source
  • hideshow 6 child comments
    •
  • [–] 101 points 2 years ago (11 children)

    I'm not IT, just a college instructor, but you'd be amazed at how many Gen Z students have told me that they can't log into their email because they don't know their own password. Not even forgot; they don't even know it in the first place because every device remembers everything for them.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 22 child comments
    •
  • [–] 110 points 2 years ago (2 children)

    To be fair that is basically what we are trying to get people to do though. Use a good password vault with a single strong password and two factor authentication. All other passwords should be a uniquely generated password for that application.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 11 points 2 years ago (4 children)

    Can you recommend a good, safe password vault?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 8 child comments
    •
  • [–] 19 points 2 years ago* (last edited 2 years ago) (1 child)

    If you're brave enough to roll your own: KeePass XC. If not, Bitwarden. (edit for clarity)

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 16 points 2 years ago (1 child)

    That's not hosting, it's just a local file.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 8 points 2 years ago (2 children)

    If you want to access your KeePass safe from multiple devices (phone, tablet, PC, etc), you have to host it somewhere.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 33 points 2 years ago

    Caring about that has been beaten out of them by increasingly absurd password requirements over dozens of systems. They won't memorize it, won't write it down physically, and use the web browser to save it.

    "But my system is different, I..."

    Nobody cares. The password is just a speed bump in doing the thing they actually want to do.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 21 points 2 years ago (1 child)

    I'll be honest as an IT professional of 25 plus years I don't know .y passwords either but that's because I let a password manager deal with it for me.

    I have had people older than me complain the comp forgot the pass in my desktop days.

    There was also it's cousin. I am definitely meeting the complexity requirements why isn't it saving

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 3 points 2 years ago

    My favorite are the services that keep rejecting the randomized passwords so I have to manually think of a password. I ain't creative enough on the spot for that! Just accept my /dev/urandom output dammit!

  • permalink
  • fedilink
  • source
  • parent
  • [–] 19 points 2 years ago (1 child)

    If they use a password manager and randomly generated passwords, then it's acceptable.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 7 points 2 years ago* (2 children)

    One of the reasons why I don't want to use a password manager, actually. If you get locked out of that, you're fucked.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 6 points 2 years ago (1 child)

    Good ones have an unlock token or another one time use way of unlocking it in case you forget your master password.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 6 points 2 years ago (2 children)

    Ease of syncing across devices has me using an internet-based password manager (Bitwarden), but I keep a second local-only password manager (Keepass) that only stores my Bitwarden password. Just in case.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 2 points 2 years ago (1 child)

    Hey that’s real smart but what if you forget the Keepass password when trying to retrieve the Bitwarden password you forgot lol?

    I use Bitwarden myself and love them. Great software great organization it seems. They didn’t even send any bullshit marketing “noooo come back YOULL LOSE EVERYTHING” emails companies love to send when you downgrade from paid to free tier and that right away bumps them up in my mind.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago*

    My wife and I also keep our Keepass passwords in each other's Bitwarden vaults.

    So to lose access we'd both have to simultaneously forget our Bitwarden passwords AND be locked out of any biometric login. I consider that sufficiently unlikely.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 13 points 2 years ago (1 child)

    Like others have said they're probably using Google as a password manager. When you're making an account for anything while in the Chrome browser it recommends strong passwords for you such as UjafUif&i$ureT6hj9gzq5hvc$tcgo0be3. Would you memorize it?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 10 points 2 years ago (2 children)

    I get it, but I also don't understand the idea of letting Google suggest a random secure password for me. Probably just the Genx/Millenial in me, but I subscribe to the xkcd school of random password generation (password generator), which makes it really easy to have secure passwords that meet complexity requirements and are also easy to memorize.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 5 points 2 years ago (1 child)

    Why not both then? Make your own human readable passwords, but do a different one each time and store them in a password vault.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 3 points 2 years ago (1 child)

    Definitely. I don't really do anything that is particularly sensitive, so I only have 3-4 standard passwords (that meet the most common complexity criteria) that I separate by how sensitive the information/service is, but if I truly needed more, I would absolutely be using a 3rd party password vault. I just don't have the need right now, so I haven't bothered.

    What gets me is the people that don't know their own passwords, don't know how/where to look them up, and don't even understand how to reset their passwords (because they can't log into their own email). I don't even know how they function in modern society.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 3 points 2 years ago

    What gets me is the people that don’t know their own passwords, don’t know how/where to look them up, and don’t even understand how to reset their passwords

    I worked support for a phone manufacturer for a while and helped a lot of poor lost souls struggle to get back into their Google accounts on their new and replacement devices. I got a lot of them in, but some may have never gotten out of authentication hell

  • permalink
  • fedilink
  • source
  • parent
  • [–] 2 points 2 years ago

    Yeah, I have my own password generation scheme. Not the most secure thing in the world but I'm at least able to log in to my accounts from other people's computers. One of these days I'll get around to using a password manager but I just can't be bothered.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 9 points 2 years ago (1 child)

    My girlfriend (millenial) is like that as well and it is infuriating. I tell her time and time again, just use a password manager that isn't the browser's password manager and you are golden. You just need to remember one "complicated" password, i.e. something with more than 8 characters and that's it.

    The many times she doesn't know her password to important account is mind boggling.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 7 points 2 years ago (2 children)

    ironically I think tech literacy is going down with future gens thanks to so many functions getting automated. Kids aren't learning how their computers work because it does all of work for them

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 9 points 2 years ago

    I hate to be a "kids these days" person, but you're absolutely right. My Gen Z students don't even understand how folder/file structure works; they just download everything onto their desktop and use the search function to find what they need later. If they can't remember what something was called, they're SOL.

    Don't get me wrong, I have a lot of faith in Gen Z and Alpha, but their strengths are definitely not the strengths of Millenials or Gen X.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 4 points 2 years ago

    My kid sister is the same way. Bought her a quest 3 for her bday. Took 3 days to get up and running because a) she had no idea what her meta account passwords were... had always just logged in on her phone... and b) none of the forgot password functions worked because she never cleared her Gmail mailbox so it had filled up and bounced previous facebook emails landing her on their internal do not send list.

    I was livid.

  • permalink
  • fedilink
  • source
  • parent