Password Managers

[backwoodsman]

I've finally decided it's time to bite the bullet and start using a password manager - instead of having passwords randomly stored in various formats/places etc.

But I've no real idea where to start? Anyone using one & got any advice &/or recommendations as which ones(s) to use . And how the heck to start?

Ta

 

[robinthehood]

I use keepass. Free and open source

Https://keepass.info

There is a mobile version too I believe.

 

[Lord Tyrion]

We use Last Pass at home and at work. Works very well up to this point.

 

[Dan2501]

1Password. It's not free but it is far and away the best password manager I've used. Have used Lastpass and Keepass in the past but neither compare to 1Password. Integrates with everything, UI is fantastic and so easy to use, can set-up family accounts for sharing passwords between users, can have as many folders as you need - so I have Personal, Work, Shared and then a folder for parent/in-law passwords in-case they forget them. It also allows you to get rid of the annoying text/authenticator apps for 2 factor auth, if you login to an account that uses 2FA using 1Password it autofills the one-time passcode for you, no copy and pasting, no opening your phone, so so easy. Well worth a look, I love it. They do a pretty good and lengthy free trial, so give it a go.

 

[Slab]

Just paste them into this thread, then whenever you need one you know that they will be here in a convenient location for you (even if you cant get online you can call one of us & we can let you know what you need) In fact there's really no reason we all cant keep them here in one place, i'll start

Bank password : Shep287$

 

[backwoodsman]

Just paste them into this thread, then whenever you need one you know that they will be here in a convenient location for you (even if you cant get online you can call one of us & we can let you know what you need) In fact there's really no reason we all cant keep them here in one place, i'll start

Bank password : Shep287$

Good idea, but on the other hand, I suspect you lot are not any more reliable than the Nigerian geezer who currently looks after my bank account ...

 

[backwoodsman]

1Password. It's not free but it is far and away the best password manager I've used. Have used Lastpass and Keepass in the past but neither compare to 1Password. Integrates with everything, UI is fantastic and so easy to use, can set-up family accounts for sharing passwords between users, can have as many folders as you need - so I have Personal, Work, Shared and then a folder for parent/in-law passwords in-case they forget them. It also allows you to get rid of the annoying text/authenticator apps for 2 factor auth, if you login to an account that uses 2FA using 1Password it autofills the one-time passcode for you, no copy and pasting, no opening your phone, so so easy. Well worth a look, I love it. They do a pretty good and lengthy free trial, so give it a go.

How much are you paying for 1Password - the website is giving prices in dollars (is that the currency you pay in?)

 

[Dan2501]

How much are you paying for 1Password - the website is giving prices in dollars (is that the currency you pay in?)

Yeah, I just paid in dollars and paid for the full 12 months up front after being really impressed with the trial period. Dead easy to set-up as well, the guides on the site are easy to follow and it's so quick to get all of your passwords saved in your browser into 1P and then it's just a matter of going through the fun task of going into each website and updating it a secure auto-generated 1P password. Took a couple of hours to move all my passwords across, but so worth it when it's done.

 

[Kellfire]

My only issue with this is that surely by only hacking one password they now have access to everything?

 

[Dan2501]

My only issue with this is that surely by only hacking one password they now have access to everything?

To access my 1Password account you'd need my Master Password, as well as my Encryption key - known in 1P as your Secret Key. This is only stored on the devices I have signed in to 1P and is not stored or held anywhere by 1P, so if they get hacked my passwords are safe as the encryption key isn't held by them. So in order to access my account someone would need to know not only my password but also my 34 character key. Pretty unlikely that anyone's going to get into it. If someone steals one of my devices they still need to know my Master Password to access anything. If they don't have access to my devices they need to know both.

 

[williamalex1]

I use my little black note book , maybe it isn't black , kept in various secret safe places that I can't even find sometimes

 

[Kellfire]

To access my 1Password account you'd need my Master Password, as well as my Encryption key - known in 1P as your Secret Key. This is only stored on the devices I have signed in to 1P and is not stored or held anywhere by 1P, so if they get hacked my passwords are safe as the encryption key isn't held by them. So in order to access my account someone would need to know not only my password but also my 34 character key. Pretty unlikely that anyone's going to get into it. If someone steals one of my devices they still need to know my Master Password to access anything. If they don't have access to my devices they need to know both.

Ok so with two passwords they get everything. I guess that’s slightly better odds!

 

[robinthehood]

Ok so with two passwords they get everything. I guess that’s slightly better odds!

Secure key, biometrics . Plenty of good ways to secure it.

 

[Dan2501]

Ok so with two passwords they get everything. I guess that’s slightly better odds!

Slightly? It would take a computer roughly 20 quindecillion years to crack a randomly generated 34 character encryption key. So unless my devices get stolen by someone that knows A) The password to get onto my device as well as B) My 1Password master password, I think I'm pretty safe, or at least a hell of a lot safer than I was storing my passwords within my browser, typically using the same or similar passwords across multiple sites. Out of interest, how do you store your passwords?

 

[spongebob59]

PC mag reviews :

https://uk.pcmag.com/password-managers/4296/the-best-password-managers-for-2020

 

[backwoodsman]

Ok so with two passwords they get everything. I guess that’s slightly better odds!

I think tech experts generally agree that password managers are the way to go. Dan indicates why.

Currently I use a spreadsheet - but have passwords set out as "cryptic crossword" type clues that will mean something only to me. But I am guilty of repeating passwords so think I need to go the tech route

 

[HampshireHog]

I have a Symantec one that requires a password on PC combined with finger print authentication on the phone to unlock.

Definitely look at 2 factor authentication.

 

[Dan2501]

PC mag reviews :

https://uk.pcmag.com/password-managers/4296/the-best-password-managers-for-2020

50% off your first year of 1Password using that link is a very good deal. Wish I'd seen that

 

[Kellfire]

Slightly? It would take a computer roughly 20 quindecillion years to crack a randomly generated 34 character encryption key. So unless my devices get stolen by someone that knows A) The password to get onto my device as well as B) My 1Password master password, I think I'm pretty safe, or at least a hell of a lot safer than I was storing my passwords within my browser, typically using the same or similar passwords across multiple sites. Out of interest, how do you store your passwords?

I don’t, I remember them and each password is unique and somehow linked to the account it’s for in different way than others. I must have a good memory seeing as I also remember my Stableford scores. ?

 

[robinthehood]

I don’t, I remember them and each password is unique and somehow linked to the account it’s for in different way than others. I must have a good memory seeing as I also remember my Stableford scores. ?

Great untill you have 1000s of passwords, many ultra complex and randomly generated.