Keyfile? YubiKey? Both? I, myself, use just use a standard keyfile that I generated with KeePass. This should be plenty secure along with a strong password.
Some guy once showed me a neat trick. Instead of generating the keyfile in KeePass, he would instead generate a very long password, paste it into a txt file, and use that as a keyfile. That way, it is much easier to backup, since it is just a single-line string of text. It can even be backed up as a QR code very easily.
10 Comments
amanneedsamaid@sopuli.xyz · 3 pts · 3y
YubiKey 👍
jelloeater85@lemmy.world · 1 pts · 2y
How's that working on mobile? Support on KeepassDX seems nice. Sorry to Necro.
amanneedsamaid@sopuli.xyz · 2 pts · 2y
I use KeepassDX w/ "Key Driver"
jelloeater85@lemmy.world · 2 pts · 2y
Same! Shit just works, it's dope.
amanneedsamaid@sopuli.xyz · 1 pts · 2y
For real! Yubikeys are such a convenient 2FA method, I highly recommend to anyone reading this. (ALWAYS BUY TWO KEYS)
aqua@lemmy.world · 3 pts · 3y
I use the password alone.
BrianTheeBiscuiteer@lemmy.world · 4 pts · 3y
Same, but my password is very long and based on an easily locatable publication (i.e. a book in the public domain).
ScaNtuRd@lemmy.world · 2 pts · 3y
Be careful not to reveal too much info haha
ScaNtuRd@lemmy.world · 3 pts · 3y
That should be sufficient in my opinion, as long as your password has lots of entropy! I am the kind of person that puts locks on locks (metaphorically speaking), so I have a very complicated password and a keyfile.
Flagstaff@programming.dev · 1 pts · 1y
I haven't actually looked into the key files; I only use a long (>25-char) password... Hmm... If it could be just a string of text then I suppose you'd want to obfuscate it with an unexpected filename, huh?