Password Storage ??

luci

Lastpass is the one that is normally recommended on here although I have never used it. What is the difference between that and Keepass?

Guardsman

I do it the old fashioned way by jotting down password reminders and licence keys in a diary thats kept by the computer.

jayme1

I also keep them written down on good old pen and paper, far more secure than any online storage can be, a hacker would have to invent the teleport to steal them.

fwor

luci wrote: »

Lastpass is the one that is normally recommended on here although I have never used it.

This is the reason I wouldn't recommend an online service where you have to trust that someone else knows what they are doing: Lastpass potential breach last year.

Davesnave

I just keep mine in a file on a memory stick encrypted with Truecrypt. Is there anything wrong with that?

stevemcol

fwor wrote: »

This is the reason I wouldn't recommend an online service where you have to trust that someone else knows what they are doing: Lastpass potential breach last year.

If I read the artical correctly, the problem was down to people not using a strong password to protect Lastpass. That is asking for trouble with any password locker.

jackieblack

Guardsman wrote: »

I do it the old fashioned way by jotting down password reminders and licence keys in a diary thats kept by the computer.

This is what my Dad used to do, until one day when he needed it he found the diary had vanished - he thinks he must have knocked it off the desk into the bin without realising!
Panic!

fwor

stevemcol wrote: »

If I read the artical correctly, the problem was down to people not using a strong password to protect Lastpass. That is asking for trouble with any password locker.

No - if you read the original article (this one) they suspected that someone had hacked their database and made off with user's encrypted password data (hence the weaker ones being easier to break for whoever now has that password data).

Reading around the "erring on the side of caution" weasel words, it seems to me that there must be very strong evidence that the breach actually happened, or LastPass would simply have categorically denied it.

stevemcol

fwor wrote: »

No - if you read the original article (this one) they suspected that someone had hacked their database and made off with user's encrypted password data (hence the weaker ones being easier to break for whoever now has that password data).

Reading around the "erring on the side of caution" weasel words, it seems to me that there must be very strong evidence that the breach actually happened, or LastPass would simply have categorically denied it.

That's what I'm getting at. I use password lockers (keepass in my case) on the assumption that they will fall into the wrong hands; so I ensure that the file is protected with a very strong password. I believe that is how all password storage systems on or off line should be managed. Then it makes no difference if they are hacked or not. Or am I still missing the point?

societys_child

just use letmein or password - easy to remember:rotfl:

everybody else does . . .

:eek: