Password Lockers

Lil306

Can anyone recommend a high end password/number locker that is really secure?

Sad to say my life has become all numbers and I'm starting to forget all my numbers for debit cards and phone numbers etc because it's becoming confusing lol

Free preferably, although I'm willing to pay.

fwor

Keepass, with a long passphrase plus a keyfile kept on a USB pendrive that you store somewhere away from the PC when not in use.

This meets the classic "something you know and something you have" security model.

Keepass is Open Source, and uses AES - though you can choose alternatives such as Twofish if you want.

Supports auto password generation, auto-locking on a timeout, and auto-clearing of the clipboard when you copy and paste usernames/passwords into a website.

A.Penny.Saved

fwor wrote: »

Keepass, with a long passphrase plus a keyfile kept on a USB pendrive that you store somewhere away from the PC when not in use.

This meets the classic "something you know and something you have" security model.

Keepass is Open Source, and uses AES - though you can choose alternatives such as Twofish if you want.

Supports auto password generation, auto-locking on a timeout, and auto-clearing of the clipboard when you copy and paste usernames/passwords into a website.

It sounds like Lil306 wanted something for numbers in general rather than something specific to browsers. Although keepass isn't only for browsers so it could just as easily be used and it is very secure so is a good suggestion.

Some precautions:

Keep the Password database in multiple places because hard drives do fail!
PC's/laptops are sometimes stolen so ensure that you have a USB flash drive or similar to store backups.

For phone numbers, it is less ideal.

Lil306

A.Penny.Saved wrote: »

It sounds like Lil306 wanted something for numbers in general rather than something specific to browsers. Although keepass isn't only for browsers so it could just as easily be used and it is very secure so is a good suggestion.

Some precautions:

Keep the Password database in multiple places because hard drives do fail!
PC's/laptops are sometimes stolen so ensure that you have a USB flash drive or similar to store backups.

For phone numbers, it is less ideal.

Thanks,

It's more of a case so I can encrypt things like my PIN numbers for my bank cards if I ever forget them and telephone numbers of friends etc

I can probably remember my pin code if I tried, although I think I've got like 4 different pin numbers ;(

A.Penny.Saved

Lil306 wrote: »

Thanks,

It's more of a case so I can encrypt things like my PIN numbers for my bank cards if I ever forget them and telephone numbers of friends etc

I can probably remember my pin code if I tried, although I think I've got like 4 different pin numbers ;(

Check the Keepass sites plugin section for extensions which can be useful. There are backup extensions which can save the database to places other than the main database location.

Make sure that the main database password is very strong and complex using upper/lower case, numbers and other characters to make any dictionary attacks less likely to succeed. You can change the database key transformations which is a calculation which needs to be done when the database password is entered. It slows down the opening of the database and more importantly slows down any attempted dictionary attack against it. It would take many years to crack a reasonable password with current computer hardware.

Using Keyscrambler would help protect the master password because the Pro version does support Keepass.

RosieBee_2

Hello,

Have a look at this one https://lastpass.com/

Hope this helps

fwor

I'd second the advice above to backup regularly. I keep a copy of the database and keyfile in different places on a relative's hard disk, so the backup would survive a house fire.

RosieBee wrote: »

Hello,

Have a look at this one https://lastpass.com/

Hope this helps

Agreed, it's good for portability, but I wouldn't use it for banking details, as that would ~probably~ violate the bank's security policy.

scheming_gypsy

Just save them in a document and stick it on an encrypted pen drive http://www.google.co.uk/products/catalog?q=encrypted+usb+drive&oe=utf-8&rls=org.mozilla:en-US:official&client=firefox-a&um=1&ie=UTF-8&tbm=shop&cid=4606257118464180281&sa=X&ei=zb_WTqfTDseg8gPMh8D7Bw&ved=0CIABEPMCMAQ

Lil306

scheming_gypsy wrote: »

Just save them in a document and stick it on an encrypted pen drive http://www.google.co.uk/products/catalog?q=encrypted+usb+drive&oe=utf-8&rls=org.mozilla:en-US:official&client=firefox-a&um=1&ie=UTF-8&tbm=shop&cid=4606257118464180281&sa=X&ei=zb_WTqfTDseg8gPMh8D7Bw&ved=0CIABEPMCMAQ

Thanks, I thought about that option. Would be handy for travelling around at least. Intitially ruled it out as I thought they were expensive. Although I was thinking more of the IronGate keys

stevemcol

Agree with the keypass recommendations.
Email youself a copy of the password file periodically which is easier than keeping backups.

It's just a pain where websites want the second, sixth & ninth letters etc. Also where websites have certain rules for password generation that Keypass doesn't immediately use.

Otherwise very good and free.

Unless you are responsible for several multi million pound Swiss bank accounts, I wouldn't bother with a USB stick key + password. Just a really strong password. Join two words and substitue a couple of letters for symbols or numbers. Test it here http://howsecureismypassword.net/

Lil306

stevemcol wrote: »

Agree with the keypass recommendations.
Email youself a copy of the password file periodically which is easier than keeping backups.

It's just a pain where websites want the second, sixth & ninth letters etc. Also where websites have certain rules for password generation that Keypass doesn't immediately use.

Otherwise very good and free.

Unless you are responsible for several multi million pound Swiss bank accounts, I wouldn't bother with a USB stick key + password. Just a really strong password. Join two words and substitue a couple of letters for symbols or numbers. Test it here http://howsecureismypassword.net/

It would take a desktop PC
About 193 trillion years
to hack your password

• Length: Long
  
  Your password is over 16 characters long. It should be pretty safe.

It's mainly a reminder more than anything else :P