Password Management

VoucherMan

Not a free option, but I've been using RoboForm for a long time, and am quite happy with it.

prowla

I use keepass, both at home and at work.

Oblivion

I have always used Access Manager and find it really excellent. There is a free version but it's best to pay the modest fee to get the full Pro version which has full functionality including Memorable phrases etc.


http://www.accessmanager.co.uk/

victor2

I have my own domain and use a unique email address (with a forwarder) and password for any site I need to register with. I have a system for coming up with the password unique to that site. Not difficult to figure out, but as I'm not holding any state secrets, it does what I need. Any robot that does discover the email address and associated password would be unable to access anything else. A half intelligent human would, but my banking has a PINSentry device as well.
Works for me.

ChiefGrasscutter

Well, with your email address and password if discovered they can try various other shopping and other websites you might have an account with.
Then they ask for a password reset having claimed to have "forgotten" the password.
This password reset link will then be sent to your email address which they have access to - so that will enable them to get in to these other sites and collect other information stored there in your details and obviously enable them to defraud you.

So your email password should be the MOST secure of all of them on a par with your banking passwords.

Mr_Toad

Another vote for Keepass.

It was standard issue at work, and as others have said it works on all the popular platforms. I use it on my Samsung phone, Mac, Linux and Windows.

And it's free!

victor2

ChiefGrasscutter wrote: »

Well, with your email address and password if discovered they can try various other shopping and other websites you might have an account with.
Then they ask for a password reset having claimed to have "forgotten" the password.
This password reset link will then be sent to your email address which they have access to - so that will enable them to get in to these other sites and collect other information stored there in your details and obviously enable them to defraud you.

So your email password should be the MOST secure of all of them on a par with your banking passwords.

There is no email account with the "discovered" address, it's just a forwarder to another real address, with a different password. The forgotten password process would therefore achieve nothing but send an email they couldn't see, but I would.
Like I said, not a foolproof system by any means, but it works for me and is relatively easy to manage. My biggest challenge has been figuring out what email address I would have used if I've forgotten the credentials for a particular site. I have been known to scan through my forwarders list to figure that out! The domain management is behind another username and password which does not use the "system" my other passwords use.

London50

cookie365 wrote: »

Ah, an actual physical book.

Well I suppose if you never get interrupted before you can hide it away, live on your own, never need to access any websites outside your house, have comparatively weak passwords that have no potentially ambiguous characters, and can guarantee you'll never have a fire, and don't mind it being far less secure than a password manager, I guess it'll do.

I have the same and do not live alone, have family in and out all the time, have passwords of at least 22 characters including ambiguous ones and a fire resistant folder to store it in along with one place {in plain view} that no one would think of looking and no chance of any online hackers breaking any of my codes that's for sure.
Even if they got my book the passwords do not match with the other info and I am the only one that knows what password goes with what site:D

newpuppy

I've been updating all my passwords recently, but couldn't find anywhere on one particular site to do theirs. I emailed for advice and they told me to email back with my new password and they would change it.

Another site, in response to their 'Forgotten your password?' link, emailed me back with the password typed out in full.

Hello? Why am I bothering with passwords then?

forgotmyname

fwor wrote: »

I use Keepass because it is available on all of the OSs that I use - Windows, Linux and Android. It's also Open Source so (in theory at least) it should be more secure than ones based on proprietary code (and of course it's also free).

Why is open source more secure? Surely having the enencrypted code in front of you makes it easier to follow the commands an see where the data is flowing and where you can intercept it?

I remember loading games onto the computer via the tape deck and with trial and error skipping the first second(s) or the last few seconds to hopefully bypass the code that locked out the pause/break keys.

I am a hands on person i prefer to learn by taking something apart to see how it ticks rather than how to build it from scratch.

I seem to have a knack of trying something different and unexpected.