YouTube video by Softflava

YouTube video by Softflava

Graham Kartna · TMP2 · Song · 2021

I have recently setup a BIOS protected, full disk encryption, UKI, Secure Boot and TMP2 (with a pin) setup on linux-hardened kernel (alongside other tweaks) and it has hit me that I need to figure out a secure way of storing my passwords, especially extremely important ones (like TMP pin, BIOS password, LUKS password, etc) and my Proton accounts. Previously I stored both of my Proton accounts passwords and one-time passcodes on Proton Pass, so if I lost access to my online Proton account, I would have been in a very very bad situation (which nearly happened).. so today I am asking for some feedback on my ideas/current progress! Just for context my threat model is to mitigate mass surveillance and to protect my data. Side note, I do not have any physical hardware keys at the moment, I **finally** have access to some income and I definitely want to look into that (it could probably solve a lot of my problems xD) #### Current Idea My current idea is to store anything extremely important (LUKS password, etc) in a notebook that I always carry on me (with two backups, one stored in my house and one off-site), but change them in a specific order, lets say you generated a 16 character password on proton passes password generator (website) and you got: ZhxB5?g@QeyNCj6E I would then turn this into: @g?5BxhZE6jCNyeQ and write it down. The only issues that I see with this is if I either get into a very long coma and forget how to convert it back, lose the notebook (and my backups) at the same time or someone figures out the original password, there is also that one comic by xkcd that could also happen.. Plus I’m not sure if this is the best way to do this, but it’s what I have thought of so far based on my threat model. #### Managing Proton Accounts/Password Manager My Proton accounts are very important, on my internet account I pay for Proton Pass and that saves all of my passwords (including personal ones), and my personal account has my camera roll stored on it as a back up measure, plus important emails, etc. I log into these accounts on different firefox profiles with both having arkenfox hardening. I have set up Ente Auth to store both of my Proton accounts one-time passcodes, and in the note section I store the password in the same process as above. The password to Enth Auth will be memorized and I have only temporarily written it down so I can memorize it. Yet again only issue I see with this is if I get into a coma or that one xkcd comic. I have got my Ente Auth recovery code, alongside both of my Proton recovery codes, but I am at a lost on where to store them. They are just written on a piece of paper right now, and this also goes for the TMP recovery key.. I could store the TMP recovery key in the notebook (and on the backups), and store the Ente and Proton recovery codes on my laptop, but then I would need to figure out how to back up the Ente and Proton recovery codes. #### The End And that’s it! I think I’ve covered everything.. if you have any feedback/recommendations I would really appreciate you sharing, I haven’t tried to come up with a system like this before so I thought id share and see if I’m on track, or if I have missed anything critical/important c:

YouTube video by Lo-Ping

Jackbox with Viewers| TMP2, Quiplash, Fibbage, and more| TTSChat| Room Code on Screen

YouTube video by Graham Kartna

YouTube video by Softflava