WARNING - internet passwords

Murphy_The_Cat

bristolleedsfan wrote: »

Ud also have to create security questions to access the word document just in case someone discovers the password to the word document :rotfl:

, how does that work then ?

bristolleedsfan

Murphy_The_Cat wrote: »

, how does that work then ?

O/P will guide us through that procedure.

Murphy_The_Cat

bristolleedsfan wrote: »

O/P will guide us through that procedure.

I hope so, because I haven't got the foggiest idea what you are talking about :rotfl:

m_c_s

Murphy_The_Cat wrote: »

On a Word document, record all of your login and password details and then password protect that file as well, with a password that you are very familliar with.
Doing it that way, you only need to remember one password, for all of your sites :beer:

I don't think this is a good idea. Anybody with a little knowledge of computer security can crack the password of word, Acrobat, Excel etc documents. There is software readily available which automates the process and can crack the password in seconds using a cheap computer!
For £10 or £15 you can get proper, almost unbreakable (see my previous post), encrypted user friendly password storage software.

Murphy_The_Cat

m_c_s wrote: »

I don't think this is a good idea. Anybody with a little knowledge of computer security can crack the password of word, Acrobat, Excel etc documents. There is software readily available which automates the process and can crack the password in seconds using a cheap computer!
For £10 or £15 you can get proper, almost unbreakable (see my prevuous post), encrypted user friendly password storage software.

Asuming they can get through your firewall. No, don't tell me. Let me guess, anybody with a little knowledge of computer security can bypass a firewall and .............etc etc etc ?

bristolleedsfan

Im gonna stick with using same one or two Passwords that I can carry around in my head.

m_c_s

Murphy_The_Cat wrote: »

Asuming they can get through your firewall. No, don't tell me. Let me guess, anybody with a little knowledge of computer security can bypass a firewall and .............etc etc etc ?

Well if you are targetted then a decent hacker (someone with more than a little knowledge of computer security) has lots of tools to access your data, but a good firewall will cause him or her some problems. Unfortunately there are a lot of people without even basic security measures installed. However, you have to be targetted and I guess the odds are low but remember there are auto-bots searching the internet 24hrs for unsecure computers.
The main problems arise when replying to false emails, entering data into false websites and using illegal software that has spyware code attached. Your IP address is logged and tracked, firewall shut down or malicious software installed and then you are open to hacking.

munk

A Microsoft Office document is not designed to store passwords. A password safe application like keepass is. Breaking a Word document is trivial relatively speaking whereas breaking a keepass file isn't.

The exception to this is MS Office 2007 where the security of their auth schemes has become a lot more robust and comparable to the password safe applications. Nonetheless, an MS Word document is not designed to store passwords whereas a password safe application is!

Some of the features that make keepass a decent choice for keeping passwords:

• Allows autologin to websites using ctrl-alt-a
• Has a decent password generator to quickly generate random passwords
• Can be set to expire passwords after 3 months (or whatever) so you're forced to keep important passwords 'fresh'
• Can be set up to only work when a usb stick is present
• Open source, lots of eyes on the development of the app to iron out any problems (although there aren't a lot of problems re security).

http://keepass.info/

Another smart idea is a usb keystick with a fingerprint scanner so you rock up to a machine with your usb stick, plug it in, scan your fingerprint and the password data stored on the stick is ready to use. Not tried it but sounds interesting.


Also re Murphy's suggesting that someone would have to penetrate your network defenses to obtain your Word file... not if you accidentally mail the thing to someone or lose it on a USB stick or have someone nick your computer or buy your second hand hard drive that hasn't had it's disk formatted properly or ... etc

obsessed_saver

Maybe it's a keylogging trojan that got on your PC?

m_c_s

munk wrote: »

http://keepass.info/

or try keypass

http://www.dobysoft.com/products/keypass/index.html
It is one of the most secure with 448-bit blowfish encryption. No one will gain access, well not in the next 100 years anyway!