Two-factor paper passwords

http://blog.jgc.org/2016/05/two-factor-paper-passwords.html

by jgrahamc • 10 years ago

186 96 10 years ago

blog.jgc.org

jgrahamc2• 10 years ago

The first thing I tell people to do is secure their email with a good password and two factor authentication because if that gets hacked most other stuff can be hacked via password resets.

fredley4• 10 years ago

Your email address is your identity online - everything but everything assumes this. I have strong passwords and 2FA on my main account. If it was hacked, an attacker could (for example), reset my password for my national security vetting portal account. On there is available to anyone who has my login (no 2FA for this, obviously), forms which detail everything about me, my partner, my parents. My total, actual identity. I am compelled to use this service for the work that I do.

I hope neither it nor my email has any security breaches.

newjersey• 10 years ago

Does it at least have a cool down period? Like if you try your username n times in the last hour, you get locked out and can't try any more for m hours?

atemerev• 10 years ago

My problem with password managers is that: a) I have more than one computer, b) I lose physical objects routinely, and my computers tend to break down and be replaced.

But I have a good memory and I trust it much more than my ability to keep things organized and make routine backups. It's easy for me to generate more or less secure passwords that I can memorize, like:

shrebangodiKe24+ binarKedonado!3297 Miregofinar--0009

etc.

Those will last for a few more years, until password crackers will become so fast that it will be impossible to remember any kind of secure password anymore.

Then, I'll be screwed.

avar• 10 years ago

Any password manager worth considering these days can sync across multiple computers given your master password.

NoGravitas2• 10 years ago

Or you can just sync your encrypted password database over ownCloud or Syncthing, or whatever.

chime• 10 years ago

My problem with password managers is that: a) I have more than one computer, b) I lose physical objects routinely, and my computers tend to break down and be replaced.

Dropbox with KeepPass on Windows / KeePassX on Mac / MiniKeepPass on iOS works beautifully for me.

distances2• 10 years ago

And KeePassX on Linux / KeePassDroid on Android. It's simple and works.

The biggest issue is that the passwords are usually copied via the clipboard, so any program accessing the clipboard could copy your passwords. It's of course up to your own assessment whether this is a problem worth consideration or not.

majewsky• 10 years ago

I've started to use a stateless password management scheme for that purpose: https://github.com/majewsky/pwget

czechdeveloper• 10 years ago

I've tried this (or similar, own implementation), but got stock on weird requirements that some services imposed. In about 50% of cases, I had to modify generated password anyway (usually make it shorter). So instead of remembering password, I had to remember what restriction which service had.

cpach• 10 years ago

”Those will last for a few more years, until password crackers will become so fast that it will be impossible to remember any kind of secure password anymore.”

I don’t think you need to worry about that. See https://news.ycombinator.com/item?id=3140898

sigio• 10 years ago

I use passwordstore.org's pass... which just syncs all the passwords via git (and they are encrypted with gpg). So I have redundancy/backup/versioning and the rest is just seperate (gpg'd) textfiles.

fredley4• 10 years ago

I think this approach is better for your mom than for your average developer. I use LastPass and it continues to be difficult even for me to use, less savvy people wouldn't have a hope.

fbnlsr• 10 years ago

I'm also a Lastpass user, and while the service is near to flawless, I keep thinking that the UI is really bad. I wish they could work on that.

r3bl2• 10 years ago

How is it difficult? I trust the security settings on my laptop, so I'm always logged in on my main browser. The process is as simple as entering the website and clicking on log in. When I register to something new, I just click on "save password". I generate passwords using Alt+G.

Comparing this to not using password managers, (in my opinion) I would say that LastPass is both easier and safer alternative than not using one.

jwl• 10 years ago

I would recommend something like https://getvau.lt

Generate your passwords with a simple algorithm with a servicename and a keyphrase. Works really well.

tajen• 10 years ago

Have we proven that password managers are safe? It's worth for black hats to spend as much money to break a password manager as the most expensive secret stored in it. If most of the secrets of the world are stored in there, ...

gist• 10 years ago

But I have a good memory and I trust it much more

Note that "a good memory" doesn't "scale" or remain constant over time. Plus more importantly you are assuming that something minor or major won't happen to you where for some reason you aren't able to remember things very clearly like you thought you would be able to.

crasp• 10 years ago

Pretty neat for the older generation, until you run into one of these sites that persist that they know how to properly do password security and require you to have at least 1 number, at least a 'special character' (of which the definition is often very vaguely described) it should contain of at least 8 characters and also be no longer than 12.

You will soon come to the conclusion that it is still easier to teach people to use a password manager for this because these schemes are nice but only get you this far before you have to revert to remember that single password again.

spenczar5• 10 years ago

I don't understand how that wouldn't work within the system described in the blog post. Couldn't you just write down `anger lunar @1` and follow your personal secret munging rule, so it becomes `ngeraunarl@1` (or whatever)?

r3bl2• 10 years ago

The problem is that if you stumble upon three of these different requirement sites that break with your Two Step Authentication process as described in the article, you're going to forget about this rule.

Terretta• 10 years ago

No, because standard UX only gives you the arbitrary rules at creation time vs login time, so when logging in you don't know which rules you had to comply with.

Can't wait till we check min entropy and otherwise don't care.

reacweb• 10 years ago

Why no longer than 12 ?

dfox• 10 years ago

That is valid question to ask authors of systems that do not allow passwords longer than 12 characters (or 8, which is another popular upper limit, which can have some vaguely meaningful technical reason for legacy systems).

jacobr1• 10 years ago

Often that is the size of the DB column and the password is stored in plaintext (or was and the size restriction remained).

gambiting• 10 years ago

Our HR management system at work, that manages all payslips and tax returns only allows passwords between 8 and 9 characters, they have to start with a letter, they have to contain one of the following "@", "_", "-", "$", but no other special characters are allowed. It has to contain one number.

It's the most bizzare password requirement I have ever seen and I am pretty sure it's not secure. Have I mentioned it only works in IE and uses ActiveX controls?

swang• 10 years ago

because a lot of companies have no technical expertise at all.

american express use to enforce insane limits on passwords back in 2010[0]. 6-8 characters for passwords, no special character and had to have 1 letter, 1 number and it wasn't case sensitive. unfortunately _I_ had an amex card.

that page i linked to also has a reply from amex support who shows little knowledge about the difference between passwords and website encryption.

they eventually started expanding that limit from 6-8 characters to 8-20 characters around 2012? 2013?

[0] http://securitywatch.pcmag.com/e-commerce/284119-amex-passwo...

js2• 10 years ago

e.g. brother-usa.com and nytimes.com have password restrictions such as this. Further, nytimes.com doesn't allow a '+' in an email address.

coherentpony2• 10 years ago

And Schwab. The password restrictions on Schwab are a complete and utter disgrace to best practices in security.

kevin_thibedeau• 10 years ago

What irritates me is sites that refuse to allow special characters. Looking at you CableVision.

tehrei• 10 years ago

You could use a hash-based password generator and write the input seed, plus the constraints for the password. Or keep the password verbatim, it's not like the site is really secure anyway.

rolfvandekrol• 10 years ago

The amount of possible alterations (practical alteration that people actually come up with) of a diceware passphrase is, I think, much lower than the possible values of a 6 figure number (which is what most two factor applications use). If you think hard, you'll come up with maybe 100 possible alterations. I wouldn't trust this scheme as my password manager. I use 1password, which feels a lot safer to me.

guava• 10 years ago

To be fair to the author, he does write the following at the end of the post:

PS If you are planning to do this... please consider using a password manager first.

which shows that he is aware that this is only a second-choice solution.

atonse• 10 years ago

As the author says multiple times, before you try this, please at least try to use a password manager.

falcolas• 10 years ago

Ironically, you're frequently safer with a written down password than you are a password that is stored on your computer.

For example, to get your password book, the attacker must have physical access to you. This immediately lowers the attack surface. Your passwords can't be sniffed out of your clipboard. Your passwords can't be brute-forced by someone who compromises by one of your accounts (even the account which stores the encrypted password vault). You can burn your password book to ensure secure deletion.

Yeah, a password manager is still probably better; even the OP acknowledges that. OTOH, how secure is your password to access that manager? How frequently do you rotate it? What happens when that password is compromised?

coredog64• 10 years ago

Why not just a laminated password card that stays in the wallet/purse?

http://www.passwordcard.org/en

pavel_lishin2• 10 years ago

It's not a bad idea, but there's a few problems:

1. I would 100% forget which symbol goes with which site.

2. The length I choose for my password may be too long/short for a given site.

3. Some sites require special symbols; some sites forbid them. Now I have to pick out my symbol based on the site's requirements, not ease of memorization.

splintercell• 10 years ago

One solution to the site restrictions regarding symbols would be that you generate a non-symbol password, and a symbol substring. You add the symbol substring when you know that the site requires symbols (or if the non-symbol password fails).

awqrre• 10 years ago

We need a website like http://plaintextoffenders.com/ but for the ones that have hurtful password rules.

anon6622• 10 years ago

I use passwordcard too and when I get a site that clashes with my algorithm, I give them one of 4-5 passwords that I used to reuse everywhere before I implemented the scheme. I have a 6-symbol password, a 10-symbol password with special characters, sure they've also been used on a dozen other sites but if their super special requirements make me extra secure who am I to blame them, I'll use my super special passwords that fit :^)

I could use a password manager but I don't want to be dependent on one piece of software, there's too many failure modes. It's already bad enough that all my accounts share a limited set of email addresses.

The main issue I have with schemes like this is that there's no repository of global identifiers for websites and services. I can build a password for blizzard.com, starting from say "bl", then I forget about it and five years later their website is now activision.com, and I wonder why I can't log in with a password built from "ac". It's a minor issue since password resets are a thing and rebrands are rare but still..

mjec• 10 years ago

Ah good yes, please do generate all of my passwords on the server side and then send them via HTTP.

gruez• 10 years ago

The site supports https

PeterWhittaker2• 10 years ago

If someone steals the book, you're done. Sorry. Unless the words are merely suggestive of actual passphrase, an attacker with the book will break your accounts very, very quickly.

Reference? https://www.schneier.com/blog/archives/2014/03/choosing_secu...

Ten years ago, this scheme might have worked, but now, attackers now about such schemes and have integrated them into their tools.

Yes, LastPass and its ilk have their challenges, but they are far superior to this security snake oil.

bradjohnson2• 10 years ago

How is that any worse or more likely than if you use the same password for all sites and one is compromised? The author clearly states that this is only an alternative option if you are not willing to use a password manager.

PeterWhittaker2• 10 years ago

The author clearly states that this is only an alternative option if you are not willing to use a password manager.

Which means it is no alternative at all. I'm a professional security consultant. If a client were to ask me to list the alternatives to using a password manager, I would say "Being hacked".

They would ask what else? I would say "That's it, that's the list".

Bad security advice is as bad as no security advice.

Having amateurs provide well-intentioned, well-stated, well-described, terrible, terrible ideas, ideas articulated well enough that they seem plausibly good, and having them being supported by people who ought to know better does the entire industry a disservice.

What would I tell my Mom? "I'm sorry, I really am, I know it's hard to use, but it really is the best alternative, the only really secure alternative, unless you want to keep a book of really strong passwords locked in your desk and only ever use your computer there."

Which, for average users and average use cases, is no alternative at all.

munin• 10 years ago

attackers now about such schemes and have integrated them into their tools.

Really? Attackers steal physical password books? Do you have any examples?

zokier• 10 years ago

Instead of silly obfuscation techniques a far more simpler and secure solution would be to append a memorized master password to the written password.

ComputerGuru• 10 years ago

Until one db is hacked and everyone in the world knows your master password.

danielweber2• 10 years ago

That is the same problem as the proposed method in the article, as the article admits.

fweespee_ch• 10 years ago

Well, they'd also need the codebook where you store the passphrase to get the other half of the password.

So if you change the master password regularly, they'd need to hack a database in that time window and steal your codebook. I highly doubt anyone would put that level of effort in.

oh_sigh• 10 years ago

So now an attacker needs access to both the hacked DB, and your physical book.

I think that that format acceptably blocks the two most dangerous groups for a persons privacy: tech savvy remote hackers, and tech inept local snoopers.

Remote hackers are tech savvy, but probably don't have physical access to your house and don't care enough about a single user to get it.

Local snoopers are probably not tech savvy, and therefore probably won't have access or know how to find a hacked database.

If there really is a tech savvy local snooper, they will know they can just install a keylogger onto the computer that they almost certainly also have physical access to.

theophrastus2• 10 years ago

Generate a 36x36 matrix of random (password suitable) characters indexed along ordinate and abscissa with a-z0-9. Two things to remember: a two character key to a password (e.g. 'am' for amazon, 'w3' for a third work related password) and a scheme for tracing a path through this tabula recta[1] following after the first character indexed by the key (e.g. spiral to the left until 12 characters are accumulated). Make two copies of the same matrix, put one in your wallet and the backup in your safe deposit box [2].

[1] https://en.wikipedia.org/wiki/Tabula_recta

[2] http://lifehacker.com/5715794/how-to-write-down-and-encrypt-...

wflynny• 10 years ago

What happens when one password is leaked somehow? Do you then have to reinitialize the matrix and reset all your passwords?

You also have the problem of some domains requiring alphanumeric only, etc., which then limits what characters you can use in all your passwords.

theophrastus2• 10 years ago

leaked password: choose a new/different two char index or path scheme.

alphanumeric only (some would say avoid such sites [shrug]): just continue along the path skipping over the non-alphanumerics until you've got the length you want.

0xdeadbeefbabe• 10 years ago

Knowing one password is leaked somehow isn't an easy problem to solve. Why assume it is?

Lxr2• 10 years ago

Here is a fairly simple alternative to this or using a password manager:

1. Remember a high-entropy “base” password that is likely to pass complexity and length requirements

2. Invent a weird way to incorporate the name or domain name of the product you’re using into this password to make it unique (e.g. “put the second letter of the domain name as the third-last character of your password”)

Advantages: Memorable but unique password for all or most services, no need for physical books that can be stolen, works on any machine. If one of your passwords is discovered, it's basically useless beyond that service unless the attacker knows your step 2.

nommm-nommm4• 10 years ago

Disadvantages: do I have an account on this site? What email address did I use to sign up? What is my username (Many have user name requirements)? My password is too long. My password is too short. My password has the wrong characters. My password does have enough numbers. My password doesn't have enough special characters. My password has too many numbers. My password had too many special characters. Now you are remembering tons of special cases. If you are specifically targeted they can compare your password in two hacked databases and find out your scheme.

Lxr2• 10 years ago

do I have an account on this site? What email address did I use to sign up?

Fair point but often there are not too many possibilities.

What is my username

Your email address, in most cases.

My password is too long. My password is too short. My password has the wrong characters. My password does have enough numbers. My password doesn't have enough special characters. My password has too many numbers. My password had too many special characters.

Occasionally a problem, but I have been using this method for years and have maybe two or three passwords that I have to manually remember for reasons like this.

If you are specifically targeted they can compare your password in two hacked databases and find out your scheme.

True, but then one can similarly come up with scenarios for most other schemes.

I agree it's not perfect and won't cover every case, but it has worked well for me.

mistercow• 10 years ago

Problem with this is that the entropy contribution of what you keep in your head is minimal. If someone gets your book, you're hosed.

n72• 10 years ago

Why not just use this? http://fabrianoboutique.eu/agenda-logins-and-passwords-564.h...

jsingleton3• 10 years ago

Anyone else get the CloudFlare CAPTCHA for the diceware link?

Ironic if John's blog caused more checks for that site.

https://www.rempe.us/diceware

jgrahamc2• 10 years ago

I did

mikegerwitz• 10 years ago

On a similar note, gnu-pw-mgr uses a memorized transformation on a URL to generate passwords on-the-fly deterministically, so no password are ever actually stored:

https://www.gnu.org/software/gnu-pw-mgr/

elchief• 10 years ago

Email is your #1 security concern as that's where password resets go.

Do yourself a favour and use Chrome, buy two U2F keys, register them both, and put one in a safe-deposit box.

It's also phishing-proof, unlike SMS or TOTP.

mongol• 10 years ago

Not bad advice although the sites supporting u2f are not so many. Google, github, and...?

theandrewbailey• 10 years ago

Yeah, let's all use this one browser!

Soon: Chrome is the new IE.

stephenr2• 10 years ago

That happened a long time ago when Google started pestering users of its web properties to use Chrome.

lewiseason• 10 years ago

Don't think Chrome is a dependency. Firefox has u2f support now (possibly through an extension?)

stephenr2• 10 years ago

I'm not sure I understand the phishing vulnerability of SMS or TOTP tokens?

joesmo• 10 years ago

Slightly off topic, but I wanted to use a password manager and installed Lastpass Premium. Great, except for the fact that it won't update passwords and often times fills in the wrong password despite my verifying that it actually stores the right one. It's completely unreliable. Thankfully, I haven't started resetting all my passwords, but that also makes the password manager useless. After paying for that, I wonder if there is a password manager that actually works and is reliable. I've read great things about many packages, but in almost every case, I've also read great things about Lastpass which is atrocious and was definitely not worth even $12 / year. Needless to say, I don't trust any of those reviews.

sandyarmstrong• 10 years ago

I don't have the problems with LastPass that you have, but if I did, I would still find it handy for secure password generation, sync, and backup.

You could just open the LastPass Vault in a separate window and copy passwords out of there and it would still be worth $12/year for me.

That being said, try right-clicking in credential fields to find more fine-grained account selection.

And maybe stop by their support to find out if something is wrong with your setup.

Two-factor paper passwords

Related Stories