|
|
My wife has asked for help in setting up a 'safe place' for passwords.
As a developer, I could create one or use a CP article, but, right now, I'm too freaking busy to do either...
So, asking for recommendations on a free to use password safe.
Much help appreciated.
|
|
|
|
|
|
ditto
That's what I do. I drink, and I know things. ~ Tyrion Lannister
|
|
|
|
|
I just set my girl friend up with this and it looks really good. The scary part was that it was able to retrieve all her passwords from her browsers (it claims to also delete them from the computer); we were able to access sites with ease that she had forgotten about long ago.
It also has an emergency access feature where you can grant someone else access to your passwords. You set a waiting period on the access, and when they request emergency access, you have the waiting period to deny access.
Also works with Mac, Linux, Android and iOS. The free version will sync password among any computers of a given platform (mobile, tablet, desktop), and the paid version supports sync across all platforms.
|
|
|
|
|
the only drawback i've found is that the iOS version requires you to use LastPass's browser, because it can't integrate into Safari or Chrome.
that's not really a big problem for me since i rarely use the web on my iPhone anyway (because mobile browsing is a nightmare)
|
|
|
|
|
And actually you can fill passwords from Safari now by tapping the "share" button and choosing "LastPass".
|
|
|
|
|
KeePass[^] works quite well. There's also this port[^] which works on Mac and Linux as well.
The passwords are only stored on one computer, though. If you need to share them between multiple devices, you'll need to manually sync the .kdbx files, or use something else.
"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer
|
|
|
|
|
Actually, you don't need the port anymore. The original KeePass has been updated with Mono-compatible code, so it will run on all three platforms (as long as you have Mono installed).
|
|
|
|
|
I use keepass as well, it's been great. There's also an Android version so you can access the database on your phone. As to the keeping the encrypted database synchronized, you can use something like Dropbox.... or just manually back it up every now and then (that's what I do).
|
|
|
|
|
I'm experimenting with KeePass, so far it does most of what I like so it may be a keeper. The stand-alone version is a great feature.
I won't use an on-line password manager -- they are all perfectly safe until they get hacked the first time. If something is accessible, it WILL get hacked at some point. As someone else said, if a hacker can't get at the media, they can't hack it.
Long ago I wrote an MS Access database app that stores URL, UID, PWD, up to 5 security Q&A, plus a general use memo field. I keep it on a stick (have 2 backup sticks in secure places) in an encrypted zip file. The file names have nothing to do with computers, the web, or security. [I need to investigate encrypting the stick, which I might do even if I switch to KeePass.]
This doesn't allow automatic login to anything ... but it won't get hacked unless I'm stupid with the stick.
|
|
|
|
|
|
If you petition the correct democratic government representative, he/she/it can setup a safe place for your passwords.
".45 ACP - because shooting twice is just silly" - JSOP, 2010
-
You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
-
When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013
|
|
|
|
|
Is that democratic or Democratic?
If you have an important point to make, don't try to be subtle or clever. Use a pile driver. Hit the point once. Then come back and hit it again. Then hit it a third time - a tremendous whack.
--Winston Churchill
|
|
|
|
|
I'm partial to keepass -- open source, ported to everything (iOS, Android, Win, Lin), all the ports can reliably open each other's database files, even has a version that runs (on windows) from a flash drive without having to install it first. I keep separate database files for work and personal on my phone, since its nearly always with me. Only catch is that all the recent apps for Android share the same (probably Android) bug where they can't reliably access or write to databases -- you have to search for the version that supports offline access to get one that works, and then manually backup the database file periodically.
We can program with only 1's, but if all you've got are zeros, you've got nothing.
|
|
|
|
|
I'm partial to physical mediums. A copy at home in a safe location and maybe a copy on the person.
It's fairly easy to see if someone broke into your house / mugged you / robbed you. It's fairly harder to know if someone somehow got access to several thousands keysafes until months later.
GCS d--- s-/++ a- C++++ U+++ P- L- E-- W++ N++ o+ K- w+++ O? M-- V? PS+ PE- Y+ PGP t++ 5? X R++ tv-- b+ DI+++ D++ G e++>+++ h--- ++>+++ y+++* Weapons extension: ma- k++ F+2 X
If you think 'goto' is evil, try writing an Assembly program without JMP. -- TNCaver
When I was six, there were no ones and zeroes - only zeroes. And not all of them worked. -- Ravi Bhavnani
|
|
|
|
|
Another reason to use Keepass is that the code is open source and has an article explaining it.
KeePass Password Safe[^]
|
|
|
|
|
KeePass; but you'd want to run it (along with a browser) in a separate desktop without hooking-rights. The settings should "hide the password" and not show it, otherwise any screengrabber could empty your vault.
Bastard Programmer from Hell 
If you can't read my code, try converting it here[^]
|
|
|
|
|
On a piece of paper.
I've yet to see malware that can hack a drawer to reach and read a piece of paper.
I wanna be a eunuchs developer! Pass me a bread knife!
|
|
|
|
|
|
PasswordSafe and Dropbox. It has a windows and android version, don't know about the fruity thing.
Never underestimate the power of human stupidity
RAH
|
|
|
|
|
Mycroft Holmes wrote: PasswordSafe
|
|
|
|
|
Write it on a paper and put it in your Wallet!
|
|
|
|
|
I spent several days researching password safes about a year ago and decided on Encrptr from SpiderOak
(see https://spideroak.com/solutions/encryptr) for a detailed description. I chose the product for the following reasons:
1. Cheap - as in free
2. Anonymity - in that the user id is not linked to your email account, name etc.
3. Security - uses Zero Knowledge cloud service
4. Accessibility - from mobile phone, desktop, laptop, in windows, android, linux, or OSx of your choice.
|
|
|
|
|
Wait for it... Password Safe[^]! I've been using it for years. Works on all platforms - Windows, Mac, Linux, Android, iOS. Open source, too. Has tons of great features like double-click to browse to URL, customizable autotype of username and password, password generator with default pattern or multiple user defined patterns. You can keep notes on each entry which are also secured.
Da Bomb
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
