Is it bad security practice to use the same passphrase for your ssh keys and your password manager master password?

Question

Is it a bad security practice to use the same passphrase (assume strong, diceware-esque) for your ssh keys and your password manager master password?

It really depends on how secure you want to be. Personally I'd use and suggest a unique master password. — Kevin, Mar 12, 2017 at 5:23
From a security perspective, its never a good idea to re-use anything. — vishnu narayanan, Mar 12, 2017 at 5:24
@vishnunarayanan I'm aware of that but I've seen many people that are storing their password managers to keep their ssh passphrases. Is that scenario any more secure than just using the same passphrase on both the passwd manager and your ssh keys? — Aspiring Dev, Mar 12, 2017 at 13:04

Stephen Rauch · Accepted Answer · 2017-03-12 05:47:21Z

1

As is so often the case, XKCD has already covered this topic:

answered Mar 12, 2017 at 5:47

Stephen Rauch

3,17610 gold badges24 silver badges26 bronze badges

That may be a funny comic, but please can you extract the relevant information and provide a proper answer?
– DavidPostill ♦
Mar 12, 2017 at 9:15
Outdated (Google is already evil ;) and it doesn't really apply here. I specifically describe the limited reuse scenario and it doesn't involve the use of the passphrase on any kind of webservice.
– Aspiring Dev
Mar 12, 2017 at 13:02

Add a comment |

1 Answer 1