Website name | account name | password | Date last changed | Notes (check qs and additional login info)
I am doing this for my 80yo mentee.
Paper is safer imho. I'd love to take him to a password store but he's ipad and integrations are poor. The built in Keystore is fine: he just forgets which ones he's reused. Chrome does good checks if you love Google.
2FA needed. I wish it wasn't SIM/txt but for now it's all I can reliably get him to apart from Apple "check trusted device"
Distinct pw per account is increasingly vital. Seniors have shitloads of risk in their pension banking and related.
Yeah, I am also leaning towards a printed out sheet. The issue is using it across different devices and on mobile they end up being stuck without a password. I like how Google and Apple lets you configure a backup email/account, which has been useful to get the alerts if they try to change their password for example.
2FA on Google also mandates a set of ten one time backup codes. Print it out, keep it safe. Perhaps one to physically escrow for them. Or, you can help them prime bitwarden on your machine, but they have the password not you and its also off-line sealed envelope in their or some escrow's hands.
Comments
Print out a tabular sheet of
I am doing this for my 80yo mentee.Paper is safer imho. I'd love to take him to a password store but he's ipad and integrations are poor. The built in Keystore is fine: he just forgets which ones he's reused. Chrome does good checks if you love Google.
2FA needed. I wish it wasn't SIM/txt but for now it's all I can reliably get him to apart from Apple "check trusted device"
Distinct pw per account is increasingly vital. Seniors have shitloads of risk in their pension banking and related.
Yeah, I am also leaning towards a printed out sheet. The issue is using it across different devices and on mobile they end up being stuck without a password. I like how Google and Apple lets you configure a backup email/account, which has been useful to get the alerts if they try to change their password for example.
2FA on Google also mandates a set of ten one time backup codes. Print it out, keep it safe. Perhaps one to physically escrow for them. Or, you can help them prime bitwarden on your machine, but they have the password not you and its also off-line sealed envelope in their or some escrow's hands.
Or go the whole hog and m of n it