re-saving passwords

joe134

fwor wrote: »

There are several ways to use this type of password safe, but here's one way:

The password database is a small file on your PCs hard disk. It's encrypted using AES, which government agencies use to encrypt military secret correspondence, among other things.

Keypass can only decrypt the password database if you provide it with two things - the passphrase, which is a long password that you must remember, and the keyfile, which is essentially just a small file with a very, very large number in it. The keyfile is kept on a USB pendrive which you must remember to remove when you are not using your PC.

If either the USB pendrive or PC are stolen, neither file is any use to anyone - it's just a file (which you can call anything you like) with random-looking data in it.

If both pendrive and PC are stolen together and the thief somehow figures out which files to access, he doesn't know your passphrase and so can't access your passwords.

Of course it's important to choose a good passphrase that's easy for you to remember but hard to guess - I use a phrase like My-cat's-name-is-Tiddles, because it has a mix of upper and lower case and non-alphanumeric characters.

One of the features of KeyPassX (I use the Linux version, hence the slightly different name) is that you can click an icon to copy a password into the clipboard, go the login page where you need the data, right-click the password field and paste the password. Keypass is designed to scrub the password from the clipboard after (I think) 30 seconds, so you don't need to worry about someone else being able to use it again later.

Thanks, much appreciated, I will try it out using non secure data first until I get the hang of it.I presume you download it from somewhere, Keypass has it.s own site or is there a better site to download it from? I have captured your info, much appreciated for the info.

Aiadi

For browsing, I use LastPass with firefox (as an add-on) and it is extremely secure (even against some keyloggers).