Kee Pass

johncolescarr

I have found a new program (well new to me anyway) that allows you to specify complex passwords and securely manage them all under a master password. It seems very secure and removes the temptation to have the same password for all of your online accounts, which is not a secure thing to do. For added protection you can also create a USB key, or lock your password database to your windows account, so that your database can only be opened on your PC.

Anyone else use this and any feedback?

Whitefiver

Yes, I use it and it is indeed very good. It is also quite well regarded, I believe. Versions are available for other devices, e.g. Windows Mobile, too.

At the price, you cannot complain.

Regards,

White.

davb

These programs are quite useful, but a couple of things to remember - if someone does manage to get into it you give up all of your passwords (so a hint may be better than the full password), and also, if it gets corrupted you could lose them all (so make sure you back it up).

Whitefiver

davb wrote: »

These programs are quite useful, but a couple of things to remember - if someone does manage to get into it you give up all of your passwords (so a hint may be better than the full password), and also, if it gets corrupted you could lose them all (so make sure you back it up).

Quite agree with those sentiments. I also extract a text version of my passwords, and other log on details from KeyPass (File... Export to... Txt File), and then copy this into Steganos Locknote, which is an encrypted executable file that is completely portable. Remember to securely delete the exported file after you have copied the detail into Locknote. There is a file shredder in Spybot.

Regards,

White.

seedyh

Yep I've used Keepass for a long time, very reliable and never had a corruption (yet..). I have a backup of the .kdp just in case..

ahillsy

Another KeePass user here. Completely recommend it.

Just remember that security is only as strong as the weakest link. It frustrates me when you register for a site and they send you a confirmation email with the password in plain text in it. Nor do you know whether they store the password in plain text either. But there's nothing you can do about - just look after security your side like you are looking to do.

Also, for everyday sites that require you to choose a security question, don't give the same info that you give for the very important situations (i.e. online banking).

buglawton

And it looks like the really useful add-ins are the IE toolbar - remembers your user names & pwords, and the similar integration with Firefox. Plus a tool to import your Firefox pword dbase if you are already using the FF pword manager.

Whitefiver

If you store your passwords within FireFox (and I would presume in IE too), please be aware that anyone with access to your machine can view them all.

Great facility, but hardly secure in my opinion.

Regards,

White,

buglawton

...anyone who has your FF password manager master password handy that is? (as you will have of course ticked the 'use master password' option in FF)

enigma52

have just had a read of this software, looks interesting but could someone who uses it please explain to me what a "key file" is and how would you use one/it?

Aiadi

Yep, KeePass is superb but I am now using LastPass extension for firefox as it is extremely secure and convenient.