Providentially, yesterday I started using a password manager (KeePassX) to organize my online passwords even before I read the thread here: http://www.puritanboard.com/f66/how-safe-cloud-67903/. It allows you to store your encrypted passwords on your computer. You can use dropbox to sync the passwords across computers. It will allow you to generate random passwords easily (a very nice feature) so that you can easily have different passwords for your various accounts. Its limitation is that if you are on a public computer, you need to have a USB key with your info or some other way of opening your KeePassX file. Lastpass is an alternative that is cloud-based, but this allows you to open up your Lastpass account from a public computer using a one-time-password (a very nice feature) to get around this problem. There is also Roboform, Passback, 1password, etc. If you use a password manager, what do you use and why?
Preferred Password Manager
- Thread starter ClayPot
- Start date
-
- Tags
- password manager security
- Status
I prefer Lastpass. If you're concerned about the security it provides through your password protection then you can increase the protection by setting it up to authenticate via a physical token. It also lets you control whether other computers or devices can access your passwords. Incidentally, encryption of the data is a function of how strong your master password is.
How many unique 10-14 character passwords do you have memorized that use numbers, upper and lower case numbers, and special characters?
Skyler
Puritan Board Graduate
I tried Lastpass, because the price is very reasonable $12/year.I ended up staying with Roboform, mostly because it was what my wife and I were used to, even though it is a bit more $20/year.
Both work similarly, and I recommend both all the time. It really is so much better than making your middle name (or street name, or mother's maiden name) your password from everything from bank accounts to online shops. (And yes, that is what people do in the alternative).
Both work similarly, and I recommend both all the time. It really is so much better than making your middle name (or street name, or mother's maiden name) your password from everything from bank accounts to online shops. (And yes, that is what people do in the alternative).
I use Roboform; when will the dock me for more money; I don't recall having to pay them for anything recently?
But might be susceptable to a dictionary-based attack.
How about something like this?:
!^!^JO!^*#deathofdeath
which is 1616 capitalized (john owen's birth), JO for John Owen, 1683 capitalized (John Owen's death) and a prominent book of his.
I don't use this one, but I use similar tricks. But I know if I get bonked on the head I might lose the recollection, so I try to save them all in a truecrypt container with a heavy duty password that I've written down in the back of a book stored in a locked container in the back yard buried under a thorney bush. (Well, I made up the last part, although I've thought about it!).
You can get pretty obsessed with security, with good reason.
Last edited:
Skyler
Puritan Board Graduate
I have yet to find a dictionary-based attack that looks for Bible verses.
If you find one, let me know.
athanatos
Puritan Board Freshman
For me? A few. But I meant for other people. If you want I could remember your passwords for you.
Plus, I have this simplify feature, where I make a master password and change all of your passwords (without letting you know, just for security), so access to all of your accounts will be easier.*
* well, for me at least
- Status