How do you keep track of all your passwords? [closed]

Question

How do you keep track of all your passwords?

Personally I host a personal copy of clipperz, I used keepass and passpack in the past.

What password manager would you recommend, what features does it have that make it awesome?

Now at 70+ "answers" it's a pretty good bet that your favourite program is already mentioned. Upvote that if that's the case.
If you can't yet upvote, come back when you've gained enough reputation instead of posting a duplicate answer.

Answer 1

I use myVidoop for all my Internet passwords. It supports OpenID and integrates nicely with Firefox.

It has a innovative image-based login, that adds some security - something that you want when storing all of your passwords. You can read more here.

Answer 2

I use sxipper (and here). It integrates perfectly into firefox, provides OpenID support. The owner, Dick Hardt, has a long standing in identity management, see here. Watch the video too, its kind of fun.

Answer 3

My passwords are: something + base + something. I memorize the base. The something I put in a list for each site. For example: base: "aabc" something for gmail: "gg"

So the password for the gmail account is "ggaabcgg"

Answer 4

I used Strip on my PalmOS PDA for several years, but nowadays I use KeePass. It seems Strip is available for the iPhone as well.

Answer 5

Post-it notes. Under my keyboard.

Answer 6

You mention it in your question, but I did not see it as answer here, so here it is:

clipperz

Features:

• Both hosted and you can install your own copy on your server
• Free, but donations are welcome!
• You can import and export your passwords and confidential information to different formats.
• javascript-based encryption, so client-side, which makes it that the server only stores encrypted informantion.

Answer 7

In the past I used a text file in an encrypted folder. Now I use SplashID, which I can access from my desktop or my WM phone. I'm surprised that no one else already posted this, or maybe I missed it. Secure Password Manager - SplashID for iPhone, Palm, BlackBerry, Windows Mobile, Android, Symbian, Windows and Mac OS

Answer 8

Lifehacker just put this http://lifehacker.com/5346325/remains-of-the-day-hide-your-passwords-on-a-floppy-disk-edition up today and I immediately thought of this post and laughed. I had to add this after reading the post-it comment, lol!

Answer 9

I use a GPG encrypted text file with Vim. It encrypt/decrypts on the fly.

Answer 10

I just write them in OneNote. It wasn't really made for this but I find it very convenient.

Answer 11

Gringotts on Linux.

Answer 12

I bought a copy of Jungle Disk which I installed on all my machines. I run KeePass on Windows machines and the Linux clients on Ubuntu. Since Jungle Disk is cross-platform too, all the databases are kept in sync.

Answer 13

I use Evernote http://www.evernote.com/ as my external brain. The great thing is that it syncs to web, iPhone and other computers as well.

For passwords, I always make sure to encrypt the data, and tag the item as a password. This saves me from yet another program (Password manager).

Of course, you should resort to OpenID if the site supports it (like the StackOverflow family).

Answer 14

I use eWallet on my desktop and iPhone, with the sync feature to keep them both up-to-date.

Answer 15

I just use atwood for everything.

Answer 16

I like Passpack because it keeps my stuff in the cloud, but gives me the option of having a desktop client which synchronizes with the same cloud-based repository.

Answer 17

Password Maker

Answer 18

I use PasswordMaker. It basically lets you create a password that's a hash of your master password, a username, and parts of the URL. There's a Firefox plugin, a mobile version, and a few others too.

Answer 19

I have a system, with different passwords for different level of needed security. I also modify the passwords according to a system for different places, so even if one place is cracked they can't use it to access other places (they need to crack at least two sites of similar security level to figure out the system). I change the passwords and systems periodically.

Answer 20

I use a system that combines a random string with something involving the name of the site. That way, I just remember the system and still get a unique password per site.

For example (I don't actually use this), one system could be take "abcd", the number of letters in the site name, and the 5th, 3rd, and 1st letter of the site. So a password for superuser would be "abcd9rps"

Answer 21

I use Roboform and synchronize it to roboform online..It is very easy and convince.

Answer 22

I developed an algorithm (using a hash function) to create an visually random-like but reproducible string of letters symbols and numbers. I store them in the browser, but if I happen to forget, applying the algorithm to the known data allows me to reobtain the password.

Answer 23

I use password corral. It works extremely well, and is portable. Unfortunately it's not cross-platform, but at the moment, that's not a huge requirement for me.

Answer 24

I like Password Depot (Windows only, commercial), mainly because:

• The user interface features a "top bar" option where you can configure a floating toolbar to shrink down to a one pixel line at the top of the screen which will pop up on top of the current window whenever you mouse over it. Very convenient.
• It supports keeping track of a list of one-time use passwords (aka TANs - Transaction Authentication Numbers) if you need to use them for banking or secure remote access, etc.
• Can be installed on / synchronized to a USB stick.
• Can use a hosted internet password server, or also works fine using cloud based file storage services such as Jungle Disk.

Answer 25

I know it's bad, but I only have a couple of passwords. A short numerical one for random sites that require logins, a much longer numerical one for more important sites that I use often, and a really long one with letters (capital, lowercase), digits, and symbols for things like banking.

Answer 26

I use GenPass (not switched to the newer SupergenPass). I like the simplicity of it - especially that you don't need to install any software, just a bookmarklet. It even works on my iPhone.

Answer 27

"OI Safe" on Android Dev Phone 1.

Works for me.

Answer 28

I have a large number of different passwords on different sites. There are some I re-use regularly on sites that I consider low-risk; unfortunately, sometimes I leet them differently at various times. Important sites, such as banking, email have unique passwords. I also allow my browser to remember my password on sites I consider safe, or for which the consequence of a password attack would be minimal.

I don't trust keeping important passwords on my computer, no matter how well encrypted, since reading an article at Microsoft that 128-bit PK encryption can be broken in a few hours by a powerful computer.

I keep my passwords in a spiral book -- that seems the only safe place to me, so long as access to the book is protected. In an office, I would keep the book in a locked file-cabinet, &/or off-site. When I am travelling away from home, book goes with me, in a separate piece of luggage from my laptop.

I am convinced that the best security is physical security.

Answer 29

I use TiddlyFolio. It's an html file with Javascript inlined for handling micro-content, with encryption to obscure the text. I had to spend some time figuring out how to use the encryption part, because the instructions that come with it are pretty lame and also I wanted to be sure that it actually works.

I like it for the following reasons:

no third party software to install (since it's just an html file)

small - at half a meg it fits easily on a USB stick which I like to carry with me, and this also makes it easy to back up

encrypted - passwords are safe, although I need to remember a master password in order to unlock it

Answer 30

I quite simply use a Google Docs' spreadsheet to hold that type of reference information. I remember the passwords most of the time, but if memory fails I know that I can access my Google Doc's password list anytime, anywhere.. cell phone, computer, it doesn't matter. Let Google handle the security and backing up of this type of information. Why re-invent the wheel? Using Google means you'd just have to remember the one Google password.

Also in this doc I can store, IPs, secondary logins, etc. with ease..