Hot answers tagged password-management
170
My favorite password storage tool is KeePass:
What is KeePass?
Today you need to remember many passwords. You need a password for the Windows network logon, your e-mail account, your website's FTP password, online passwords (like website member account), etc. etc. etc. The list is endless. Also, you should use different passwords for each account. ...
62
There appear to be several easy to use Excel password crackers around.
I would use a password management system like 1password or LastPass which work on several OSs including mobiles.
These have plugins for most browsers which can fill in passwords and other information to the web form. 1password can also set up a bookmark in the browser which will ...
43
I have used Lastpass for a while now and recommend it highly. It has some wonderful browser plugins and a bunch of features that make it easier to have more secure passwords.
The browser plugin will automatically fill-in login information (when logged into the plugin). It also has an export functionality, so you can retrieve your database and import it ...
20
The following post sums it up best from the luxsci.com blog
When Master Passwords are in use, the
data is encrypted using 3DES in CBC
mode by default. If you choose a
good, strong master password, then
this level of encryption should be
fine. 3DES is rated to be good for
general use through 2020.
You should be aware that there are
...
14
If you are already using a password manager, you could combine that with a cloud service like dropbox, or mesh. Just make sure that you can save the profile of your password manager inside a folder that is synced by the cloud service and all your other connected computers will get the updates!
12
I have a very simple way of dealing with passwords:
I don't like password managers, but I like crypto, so I take advantage of one-way hashes (md5, sha1, etc) and generate passwords using them.
How it works?
First, I choose a good long password that I will use everywhere. For example qwerty (don’t use that, just an example). Now for every site, your ...
12
No.
If you forget this master password, all your other passwords in the database are lost, too. There isn't any backdoor or a key which can open all databases. There is no way of recovering your passwords.
11
You can create a copy of a password entry:
And then only use references for username and password in the new entry:
Then, adjust the URL in the new entry.
9
I've been a long time KeePass user, and if I were tasked with justification, I'd probably do the following:
Skim the sites FAQ for all of their details about security. Everything I've seen there will practically sell itself.
Show the longevity and support for the project, indicating it isn't going to be dropped by the wayside anytime soon.
Show off a few ...
9
Regarding the ability to use 'key files' with KeePass.
In order to generate the 256-bit key for the block ciphers, the Secure Hash Algorithm SHA-256 is used. This algorithm compresses the user key provided by the user (consisting of password and/or key file) to a fixed-size key of 256 bits. This transformation is one-way, i.e. it is computationally ...
8
Password Hasher plugin (for Firefox) is what I personally use.
How Password Hasher helps:
Automatically generates strong passwords.
One master key produces different passwords at many sites.
Quickly upgrade passwords by "bumping" the site tag.
Upgrade a master key without updating all sites at once.
Supports different length passwords.
...
8
Sounds like you are trying to manage client passwords without going crazy.
What you are looking for is a password manager. You have a few options
LastPass
KeePass
RoboForm
PassPack
A home-brewed solution. Like keeping the accounts in some document
But remember, since these are your clients passwords and account information, security should be a priority ...
7
I personally use PasswordMaker to generate passwords from a master password and the site's URL. The project is fairly mature, open-source and stable. It is available for Firefox (as an extension), Linux CLI, Android etc.
How it works:
Warning - technical jargon in this section! You provide
PasswordMaker two pieces of information: a "master password" ...
7
Keepass seems to be the best available password manager.
Info:
What is KeePass?
Today you need to remember many
passwords. You need a password for the
Windows network logon, your e-mail
account, your homepage's FTP password,
online passwords (like website member
account), etc. etc. etc. The list is
endless. Also, you should use
...
6
If you've forgotten it because you just changed the master password, you can do what I do in the future:
Make a backup copy that uses the old password. Make sure this has the new password in it.
Change the real copy to use your new password
Keep the one that uses the old password around until you know the new one so well you don't even have to think about ...
6
The passwords are encrypted and stored in a SQLite database:
The important piece here is CryptProtectData, which is a Windows API function for encrypting data. Data encrypted with this function is pretty solid. It can only be decrypted on the same machine and by the same user that encrypted it in the first place.
6
You haven't stated which browser you are using, but this is achievable using greasemonkey user scripts, which are available for a number of browsers.
Preventing the autocompletion of fields and saving passwords is achieved using the autocomplete="no" attribute on form elements. This greasemonkey script removes the attribute from form fields allowing them ...
6
As fr as I know, Lastpass and Keypass are the two with the widest user base and the most renown. Lastpass is free but not open source, Keypass is both. I have used Lastpass for years on my Firefox, and I picked it at the time because it was said to provide the smoothest browser integration. If I set a site to auto-login, all I have to do is go to it, and ...
6
Yep. Run control userpasswords2 from the command line. Uncheck the box for "Users must enter a user name and password to use this computer". When you click "Apply", you'll be asked for the username/password combo you want to use to login. This user will then get logged in automatically.
5
Firefox keeps your passwords in your profile, and in most/all versions since v2.0 this data is encrypted.
Check out here: http://kb.mozillazine.org/Profile_folder_-_Firefox for locations of the password files on Windows (various versions), Linux and Mac.
key3.db - Key database
signons.txt - Previous to 2.0.0.2 - Encrypted saved passwords, requires
...
5
Well, doesn't seem like there were any, so I hacked together a quick php script to do it.
If anyone else needs to do it. Run this script, paste the exported csv in the textarea, and input the outputted csv file to keepass.
<?php
if (isset($_POST["submit"]))
{
//Loop through, build a multi array;
$parsedCSV = array();
//Columns (in order) to ...
5
Only when you disable the limitations in login.conf you can use SPACE as your password with passwd.
5
Keepass have a portable version, and is ported for mobiles (and many other devices): keepassj2me for S60. And you could keep your database on dropbox for easy access
5
I usually just create different database files and share them with a Dropbox link. Having two different files with two different random keys. I'm using version 2.09.
I have a "personal.kdbx" database that has all my personal stuff and a "company-name.kdbx". I usually use the "key file" option to open the databases since it's easier to the people I share ...
4
Found here:
Firefox will remember passwords by default. You may have disabled this feature, or told Firefox to never remember passwords for a particular site.
At the top of the Firefox windowOn the menu bar, click on the ToolsFirefoxEdit menu, and select Options...Preferences....
Select the Security panel.
If it isn't already check marked, check ...
4
Wikipedia has a nice summary on this topic
Common password practice
Password policies often include advice on proper password management such as:
never sharing a computer account
never using the same password for
more than one account
never telling a password to anyone,
including people who claim to be from
customer service or security
never writing down ...
4
Yes.
KeePass has a cross-platform port called KeePassX which runs on Mac OS X and Linux. It uses the standard KeePass storage format, so it can be used interchangeably between KeePass and KeePassX. It is also included in the Ubuntu repositories by default.
For syncing the database between computers, you can use the cross-platform application Dropbox. Put ...
Only top voted, non community-wiki answers of a minimum length are eligible
