Password Management

[VegasWayne]

I let firefox remember them, but I keep backup copies on a flash drive as a text file and also have them on an old Kindle. The Kindle doesn't have wi-fi turned on so it can't be hacked. I don't trust cloud storage. If I were more paranoid I would encrypt the text file on the flash drive.

 

[QWERTY Pi]

My 2. Don’t let any browser save your passwords. Don’t let any application save your passwords. Write them down (use a shorthand/scratch you can understand), and take a picture with your phone. Also, the longer the better. Non-numeric keys and numbers dont mean squat if the PW is short.

Browsers get hijacked, and password saving tools/applications get hijacked. Shorthand/Abbreviate all your passwords on paper (ideally in a way only you can discern when reading). Tried and true. Scan or take a mobile photo of handwritten PWs for handy backup/reference. Safe.

And remember, THE LONNNGER THE BETTER!

 

[Elliott]

Qwerty,
Lastpass, which does cost money, has my passwords encrypted only on my computer, doesn't go up to the cloud, even their site, or anywhere else.

 

[QWERTY Pi]

Qwerty,
Lastpass, which does cost money, has my passwords encrypted only on my computer, doesn't go up to the cloud, even their site, or anywhere else.

YMMV. I wouldn’t use PW managers, but they’re easy. I get it. (Lastpass had a POC exploit published within the past year +\-)

 

[Elliott]

https://www.lastpass.com/enterprise/security

So a google search indicates a patch in March 2017. Is there something more recent about an issue?
I and 150 million people have had our personal information hacked because of Equifax and computers will never be 'absolutely' secure, so I choose to go with a supported product. How's Snowden doing nowadays?

 

[QWERTY Pi]

https://www.lastpass.com/enterprise/security

So a google search indicates a patch in March 2017. Is there something more recent about an issue?
I and 150 million people have had our personal information hacked because of Equifax and computers will never be 'absolutely' secure, so I choose to go with a supported product. How's Snowden doing nowadays?

I went by memory. Hacker News is a regular read for me. So yeah, 18 mos or so. But the point I was trying to make is these applications will always be susceptible. Its much harder to make an inepenetrable application/software, versus “hack” something -so there will always be those confounded Black Hats trying to burn folks. +1 on the Equifax breach (that irked me so much -caused some problems as I had monkey business charges on a couple CC’s). Whatever works for you, you know? For passwords, I’ll do the extra work instead of trust software. Just last week the arguably most secure wireless encryption was exploited. Bad actor gets into your Network, first thing they’re going for is a password manager. You should be cool, just saying!

 

[Elliott]

Two factor on top of passwords is a must. I probably have 70+ passwords for AMCs, lender sites, and my own personal sites for banking, etc. Many sites such as Servicelink require new passwords evey few months.So a password manager that can generate 8 to 16-character random passwords and easily remember them is a must on my part. Iphones with finger print Id and sites that support finger prints is a godsend.