← Back to context

Comment by amelius

3 days ago

Ok, so what should we use instead of passwords?

Depends on for what.

online services/anything you can autofill with pw manager:

random generated password as long as possible + MFA like hardware token (UF2)

FDE device/pw manager/anything you can't autofill:

Passphrase containing at least 8 random words (Diceware) + if possible MFA like keyfile or hardware token