Printable View
I am looking to beef up my protection of my ID and want to use harder passwords, but I know that I will forget them if they are complicated, not used frequently and different on every website.
I utilize a few different computers throughout the day, not sure how these programs work..
I was looking at KeePass, but I have no idea what to look for in these applications.
Good idea? Bad idea to secure all of the passwords with one master password?
No clue, I have all of mine (50+) written down in the middle of a nondescript tablet. Why put passwords on a computer to get hacked????
Because I would need to carry around the tablet of paper with me. Which I could misplace, or have stolen, etc.Quote:
Originally Posted by liv2ski
KeePass is encrypted.
Snowden says to use a phrase. Even better I read, is one that is totally random but easy to remember. Like " sport4nun2&dog". Don't use that.
Every website has different rules about passwords; some allow caps, some don't, some require symbols, some don't, etc. I have spreadsheet kept on an un-networked laptop for all mine (between work and personal, around 80).
Seems a password manager just means one good hack and they're all vulnerable.
Yeah, thats my thinking, but it seems to be the "security experts" recommendation that you use one of these things. The nice part is I would remember one difficult password and then it would generate random passwords for different accounts. Then store the encrypted passwords on an USB drive that isn't connected full time, portable, etc.
Seems better than a excel file full of unencrypted passwords.
Keepass is good but LastPass is a better user experience and links to sites automatically. Basically like a single sign on tool.
Dude, I just emptied your retirement account.Quote:
Originally Posted by wooley12
Enough for two nights at the Taj in Joisey. Honor bar will be on you.
The only 2 ways to do it are: use passwords that are phrases with special characters replacing some of the letters- such as "a" is replaced with @, small "L" becomes ! etc. and then record them in some form of encrypted file format (that requires it's own password)- no plain text, no post-it notes, USB thumb drive or similar would work- IF YOU ARE THE TYPE THAT WILL NOT LOOSE the device. Some stick a file up in the cloud- secured and not carry something around with you.
Otherwise take a look at the password managers- RoboForm, Lastpass, KeePass and a few others offer the flexibility of being a great help, encryption and not having to worry as much about the "rules" - upper and lower case, min of x characters, and allow strong password secured for each site and unique passwords.
http://lifehacker.com/5529133/five-b...sword-managers
I started using LastPass about a year ago and love it! Makes my online experience so much easier!
^ What BZ said minus 9 months. LastPass also has a password generator which creates, encrypts, and stores, a super-string of gobbledygoook that you probably couldn't type in correctly even if you were looking at it on a post-it. The only weak link is the master password to LastPassQuote:
Originally Posted by Below Zero
How would a password manager like LastPass work with a financial aggregator like Mint? Mint needs to know all of my passwords for financial accounts so that it can update my information, but if LastPass is creating new passwords all the time then wouldn't Mint be constantly unable to access those accounts? Anyone use both?
I don't think these password managers are creating new passwords all of the time. When you reset or initially input a password then they can create strong random passwords for you, which they then store. You can view the password characters provided you have the master password. So you would be able to input it into Mint.Quote:
Originally Posted by Pegleg
I started using 1Password recently and love it. I have access on my work comp, home and iphone. From my research it was highly recommended and very secure.
1password is fantastic. Worth every penny!
Ah, thanks. I thought they regularly generated new passwords, since the expert advice is to change your passwords regularly. Seems like that would make for a better product, though it would cause the complication I mentioned regarding aggregators.Quote:
Originally Posted by char
Been using KeePass for a few years now and very happy with it. Advantage is you can get clients for most mobile OS as well and store the DB in Google Drive so you always have access to themQuote:
Originally Posted by char
I use Dashlane. It works great and across all of my devices. Easy to use secure password generation. Accessed by one password.
https://www.dashlane.com/
1password for OSX is legit.
I used a retinal scanner, but then somebody stole my eyeball.
- Det. John Anderson
Keypass on my computers, and android phone.
I keep their file on dropbox, so all devices sync automatically.
as been said, 1password works great. Multi platform.
I was going to post the same article: good, solid writeup by LH. I just started using LastPass and like it.Quote:
Originally Posted by RShea
You initiate the change and then go to the other apps like Mint to change. Just like changing your email password then having to update the password on your phone to get the messages.Quote:
Originally Posted by Pegleg
I used to have a book of passwords but now I use LastPass. It stores all your passwords in the cloud and then you have a single password log in (once in a while). It'll generate passwords for you but there's nothing automatic. It works across all my computers (3) and the paid version works with smartphones and tablets. It's not perfect. Some web sites have weird log in urls and when a site reorganizes it gets confused.
I never change passwords unless I forced to.
I've been using Password Safe for a little while now. The fact that it was originally developed by Bruce Schneier gives me a little more faith in it than some of the other options out there.
I use lastpass for work. The enterprise version syncs w/ AD, which is slick, and you can lock it down so you can only access your vault inside the org. Make all of your passwords the longest, most complex, and random supported by each site and get rid of your trapper keeper of passwords. Every now and then we'll have a site that gives it fits, and you have to pay attention to it, but take care of it and it takes care of you.
If you're truly worried about single point of failure, tie it to MFA. It supports several. Mine is hooked up to a yubikey.
For passwords you need to remember, focus on password length over complexity or frequent changes. An all lowercase 16 character pass phrase is orders of magnitude more secure than a complex, 10 character password. It's also easier to remember and type. Just avoid anything that somebody might be able to guess via data mining.
Last pass assists with password changes. It recognizes pass change prompts, fills old and generates new passwords, and then remembers it for you.Quote:
Originally Posted by Pegleg
Frequent pass changes, as security advice, is overblown. If you use the same password for everything, sure.... But if you don't, what's the rationale?