Do you use a Password Manager? Which one is better? - page 2.

mk4

legendary

Activity: 2870

Merit: 3873

📟 t3rminal.xyz

Quote from: Kakmakr on July 23, 2019, 01:37:09 AM

Password Managers are mostly used by lazy people. Why do you need a third party service to generate and store passwords for some of your most sensitive information? Do you have a 100% guarantee that those services are 100% secure? How will you know if they are not simply gathering data for some government agency?

It completely depends with the password manager you're using though. Some password managers are open-source, which you could compile yourself. If security is your main concern, the best choice would probably be KeePass[1].

[1] https://keepass.info/

darkv0rt3x

hero member

Activity: 1274

Merit: 681

I rather die on my feet than to live on my knees

I'm using LastPass.

There are some drawbacks that I'm not sure if they are related with the add-on itself or with my web browser (Google Chrome in the past and Chromium now on Linux).

At the beginning LastPass was flawless and worked like a charm. Lately, many sites are not showing up the context menu at the side of the "username" and "password" fields that would allow us to click and fill the data into those fields.

I'm using different pseudo-random passwords with a specific minimum number of chars (of all types) when sites allow that minimum number of chars for every site. So, no repeated passwords. Master Password is not random, though (maybe I have a flaw here). Anyways, I save an exported backup of all my passwords in LastPass in an encrypted volume but with a few twists to try to increase security. I save the passwords in a plaintext file that I encrypt with GPG, then I copy that file into the encrypted volume and lastely, I encrypt the file that is the encrypted volume itself. So my passwords are on my laptop hard drive but triple encrypted. Hope this makes any smart ass, that attempts to steal my passwords, life harder...

bob123

legendary

Activity: 1624

Merit: 2481

Quote from: ?? on ??

If you use Linux or Mac OS, you definitely should choose KeePassXC over KeePass.

Or KeePassX (linux)

bob123

legendary

Activity: 1624

Merit: 2481

Quote from: ONEnergy on July 23, 2019, 03:42:35 AM

Is there any one with stored pass in a cloud? Is this safe after-all?

I use two computers and mobile. I need something that can be synced once store a password on one device to be available on another.

With proper encryption, it theoretically is relatively safe.

However, this is not recommended at all. You never know who will gain access to the encrypted file.
And if later a vulnerability is found, all of your passwords are at risk.

The most secure option probably would be to simply 'sync' the database files yourself (i.e. copy it to your other devices).

LastPass and KeePass are both considered good.
I am using (and would recommend) KeePass. LastPass is not open-source, while KeePass is.

I definitely wouldn't use some browser-in-built password manager.

ONEnergy

member

Activity: 120

Merit: 15

Is there any one with stored pass in a cloud? Is this safe after-all?

I use two computers and mobile. I need something that can be synced once store a password on one device to be available on another.

psycodad

legendary

Activity: 1612

Merit: 1608

精神分析的爸

I wonder why nobody mentionned Bruce Schneier's passwordsafe:

https://www.schneier.com/academic/passsafe/

https://pwsafe.org/

HTH

Kakmakr

legendary

Activity: 3542

Merit: 1965

Leading Crypto Sports Betting & Casino Platform

Password Managers are mostly used by lazy people. Why do you need a third party service to generate and store passwords for some of your most sensitive information? Do you have a 100% guarantee that those services are 100% secure? How will you know if they are not simply gathering data for some government agency?

Yes, the data is encrypted, but governments have access to very powerful equipment to possibly decrypt some of the data stored on these sites or they partner with companies that has knowledge and resources to do this. Roll Eyes

TryNinja

legendary

Activity: 2758

Merit: 6830

Quote from: Pffrt on July 23, 2019, 01:25:27 AM

What if my device get hacked? Is it possible for the hacker to get my password from a password manager by having control of my device? I never felt the necessity of using a password becauss I am using only limited sites.

If you get hacked, he’ll see everything you type. What difference will make if you’re using a password manager or not? Password managers aren’t fool proof.

Pffrt

sr. member

Activity: 1372

Merit: 322

Quote from: TryNinja on July 23, 2019, 01:02:40 AM

Quote from: Winscosinally on July 22, 2019, 11:46:52 PM

Not all webpages will recognise password managers that's why I don't use them

You can easily click on the password manager icon and copy the username, paste it, copy the password, paste it. It takes literally 5 seconds.

What if my device get hacked? Is it possible for the hacker to get my password from a password manager by having control of my device? I never felt the necessity of using a password becauss I am using only limited sites.

TryNinja

legendary

Activity: 2758

Merit: 6830

Quote from: Winscosinally on July 22, 2019, 11:46:52 PM

Not all webpages will recognise password managers that's why I don't use them

You can easily click on the password manager icon and copy the username, paste it, copy the password, paste it. It takes literally 5 seconds.

Winscosinally

member

Activity: 490

Merit: 16

Not all webpages will recognise password managers that's why I don't use them

mk4

legendary

Activity: 2870

Merit: 3873

📟 t3rminal.xyz

Quote from: TryNinja on July 22, 2019, 08:48:29 PM

My favorite ones are Bitwarden and KeePass.

+1 to both.

Which on of the two? You gotta decide yourself. KeePass can be more secure because your password database will only be stored on your computer, but this sacrifices a bit of the user-friendliness. With Bitwarden, you either let them host your password database, or you host it yourself on your own server. Hence you can more easily access your Bitwarden pwd database on multiple devices; and not to mention that Bitwarden has their own browser extension that has the auto-fill feature so you wouldn't need to manually copy paste every password.

I personally think Bitwarden is the perfect balance between security and usability, but it's up to you.

P.S. Both are open-source. Which is a huge plus in my book.

GreatArkansas

legendary

Activity: 2534

Merit: 1397

You can also try to visit my thread before, I have included some good password managers there included KeePass and Password Safe.
I included some of the tutorials on how to use them and also advantages/disadvantages of using password managers or creating a strong/secure passwords.

[GUIDE] How to Create a Strong/Secure Password
Hello everyone, I found another alternative for KeePass Password manager.

Just a piece of advice, try to use open-sourced password managers, avoid those password managers that have a subscription, because for me, no need to pay just for password managers, but it's still your choice if you really need their special feature for the premium password managers.

TryNinja

legendary

Activity: 2758

Merit: 6830

My favorite ones are Bitwarden and KeePass.

KeePass if you want to store your passwords locally in a file - no risk of getting hacked - or Bitwarden (over Lastpass) if you don't mind using a third-party server (passwords are encrypted anyway). Both are open source and you can actually self-host your own Bitwarden server, storing everything in one of your servers.

Also, while Bitwarden works perfectly in their free version (no major features missing), you can actually pay for the pro version which is cheaper than any other password manager and have things like 2FA OTP in your entries.

hatshepsut93

legendary

Activity: 3038

Merit: 2162

I wrote my own password manager in Javascript, it encrypts the password storage with AES-GCM, and uses PBKDF2 for key derivation. I posted it in /r/crypto for review and people said it's ok. Just yesterday I turned it into an Electron app so it can work with files more conveniently, previously it was browser-based and relied on LocalStorage.

I don't recommend to role your own password manager to anyone, just want to say that using one is so much better than no manager at all, or relying on the browser, and nowadays everyone should have a strong a truly random password, especially if they deal with something like crypto.

Quote from: bitmover on July 22, 2019, 08:03:34 PM

-I read also that Firefox has a built in password manager that can be encrypted with a Master Password.

I always used the browser feature to save passwords, but it lacks one important function from password manager programs - generation of random passwords. Now that I have a full password manager, I'm not worried that I'll have similar passwords on multiple sites, and other accounts will get pwned if some of the sites has a security breach.

bones261

legendary

Activity: 1806

Merit: 1828

I personally use Keepass. I personally like their autotype feature to input your user name and password. It defeats keyloggers because it inputs random characters while typing in characters. Unfortunately, some web pages don't work with this feature, so you have to resort to using the copy/paste feature which is less secure. It also has a feature for additional security which requires a Key file. I haven't used it because the keyfile cannot be changed or moved from it's location on the computer. If it becomes corrupted, deleted or moved, you could get locked out of your data base.

bitmover

legendary

Activity: 2352

Merit: 6089

bitcoindata.science

I never used password managers, but I am inclined to use now.

I was reading about them, and find nice reasons to use one.

- Creates good passwords very easily, just clicking a button. If you use the same password on many websites, one of them may be hacked or whatever and the attacks can use the passwords in other websites which you will probably have accounts too.
- Easier to use, just click a button and it is available, you don't have to type.
- stored encrypted in the manager's vault.

Then I was searching about which one to use. I would like a free version, what do you guys recommend?

-LastPass is the one most people talk about. However, I read somewhere it was already hacked in the past...?
-KeePass I read nice things about this one too.
-I read also that Firefox has a built in password manager that can be encrypted with a Master Password.

What do you guys think is better to use? It would be nice if I didn't need to download one more add-on (I try to be minimalist with apps/add-ons).

Topic: Do you use a Password Manager? Which one is better? - page 2. (Read 528 times)