With so many websites with unique login systems, is there a way for me to track, and improve the quality of my login credentials on various accounts while limiting the risk of someone gaining access to this information, and my accounts along with it?
You could, temporarily at least, install LastPass and enter (or let it import) your existing passwords. Afterwards you could use the
This launches the LastPass Security Challenge which analyzes the items stored in your LastPass Vault and ranks them on a scale of 0-100.
I have this problem too, but I've been living with it by just unconditionally changing all of my passwords that I KNOW are the same, and every time I find myself typing in or copying a password from somewhere, I mentally determine whether that password is secure or not (i.e. unique, long, and unguessable). If it's insecure then I take the time to change it right then and there. I also use LastPass, like you.
I understand your motivation for this, certainly, because so many websites and services are getting hacked these days and having passwords which are only lightly salted or hashed being stolen. So it can be devastating if you share the same password, no matter how complex, among different sites and just one of those sites gets hacked.
What would really be ideal is if LastPass implemented something like this, because they could have their program run this analysis for you in memory (or on their secure servers) and tell you which passwords are weak and which passwords are duplicated across sites. I know this is impractical to do manually, because finding duplicates is an
But here's my recommendation: stop pursuing this problem, unless you want to convince the LastPass devs to implement it. If you're looking for some kind of custom program, let me explain why I don't think this is a valuable use of your time.
To put it simply, your passwords are probably currently stored in one of several possible places:
Regardless of where they are stored, the fact is that the programs / places they're stored in right now do not have the "password-duplicate / weak-password-finding" feature you are looking for.
So the problem is that, even if you found a perfectly viable program with exactly the functionality you want, you'd have to hunt down ALL of your passwords and manually type them (accurately) into the program before you could make good use of it. Unless, on the extremely rare chance that KeePassX or LastPass has a plugin architecture, the program could read from your existing password store (not likely, for security reasons).
So, if you have a LOT of passwords, and you don't have time to manually duplicate-find by examining each password in turn, and your current electronic password store(s) do not have the functionality you want, it would take almost the same amount of time to accurately key in all the account usernames/passwords that you currently use into another program just for the purpose of finding duplicates... so it wouldn't really be a winning solution either way.
The best way "for us" (us = people who already use LastPass) would be to have them implement the feature the way we want it. Lacking that, I think the incremental approach of "change them as and when you use them" is the least tedious.