After 20 years in IT, I've managed to remember my passwords without a password manager, but I'm starting to feel like my brain has reached its limits. I'm interested in changing my approach to managing credentials and I'm curious about what others are doing. Do you use a password manager? If so, which one and why? What are your thoughts on using hardware keys like YubiKeys or using passkeys for passwordless security?
6 Answers
Honestly, after a point, trying to remember passwords just doesn't scale. These days, the best setup is a password manager for unique, long passwords, hardware keys for MFA on important accounts, and passkeys when they’re available. If you’re managing a lot of shared accounts, it’s really time to let go of the memory approach and get a vault system with MFA.
My experience tells me that once you start using a password manager, you wonder how you ever managed without it. Definitely look at Bitwarden or LastPass; both have nice features. Plus, transitioning to hardware keys like YubiKeys for sensitive sites can give you peace of mind too!
I really can't believe you've gotten this far without a password manager! I mean, either you have an incredible memory or you've been reusing passwords like crazy. I definitely recommend switching to one like Bitwarden; it's cross-platform and the free tier usually works great for most people. Plus, you can use passkeys where possible and MFA everywhere else for better security!
Yeah, probably the former... I've been lucky so far!
I switched to password managers a few years back, and it’s been a game-changer. I now use 1Password paired with a biometric FIDO2 hardware key for my sensitive accounts. Store everything from passwords to OTP codes in there. Just remember to keep a backup key; you don’t want to lock yourself out!
For my needs, Bitwarden rocks. It has this awesome browser extension that makes logging in so much easier. Also, I really like their free tier; it’s hard to beat for personal use. Setting up your system with proper 2FA is super essential nowadays too!
I just want to add that storing your recovery codes and sensitive passwords in a GPG encrypted format or inside your password manager is crucial. I've learned that the hard way. Also, it's best to have a combination of a reliable manager and strong MFA for the best security!

Totally agree! It frees up so much mental space to focus on other important things.