Password manager apps

cookie365 · 13 November 2016 at 10:19PM

Anthorn wrote: »

However Keepass cannot similarly claim that their encryption algorithms are similarly secure. Back in 2015 it was reported that hackers stole user data from Keepass.
http://arstechnica.co.uk/security/2015/11/hacking-tool-swipes-encrypted-credentials-from-password-manager/

You've completely misunderstood keefarce. It's a proof of concept that relies on the target machine already being infected by a very specific purpose built spyware. And of course, if you've got a PC infected by spyware, nothing on it is secure.

It's like saying that a door lock is insecure because anyone with the key can open it.

Anthorn · 14 November 2016 at 11:11AM

cookie365 wrote: »

You've completely misunderstood keefarce. It's a proof of concept that relies on the target machine already being infected by a very specific purpose built spyware. And of course, if you've got a PC infected by spyware, nothing on it is secure.

It's like saying that a door lock is insecure because anyone with the key can open it.

There will always be those who refuse to install security software even though capable anti-malware can be installed for free. Not a lot that password managers can do about that.

But whether a user is exposed to malware also depends on what the password manager itself does to protect users. For example:

Another common method of password theft is malware that logs keystrokes: All a hacker needs to do is read off the website you typed in along with your username and password to get instant access.

LastPass circumvents keyloggers in two ways: It can autofill passwords once you're logged in and it also offers a virtual keyboard that you can click on with your mouse. Avoiding keystrokes while typing in passwords or using an onscreen keyboard, along with robust encryption, leaves you protected in a way you can't get with other methods.

http://www.techrepublic.com/article/lastpass-the-smart-persons-guide/

wheelz · 17 November 2016 at 7:26PM

I've managed to upload my data from Keeper on Lastpass on my laptop. I'm using it on my mobile as well and am very happy with it. It takes a while to get used to it. I had decided not to renew my existing password manager which is Keeper and sent them an email 2 days before its renewal was due. They decided to help themselves to another year's renewal money, even though I had said I didn't want it. I had no idea that they just automatically renew, they have now confirmed that they are refunding the money. So glad I'm no longer with Keeper.