Topic 'Which password manager is the safest and most trustworthy?' in forum 'Security' - dslreports.com

Re: Which password manager is the safest and most trustworthy?

Mon, 28 Jan 2013 19:02:58 EDT

Dustyn posted : Thanks for the info! :)

Re: Which password manager is the safest and most trustworthy?

Sun, 27 Jan 2013 15:17:49 EDT

Ryan posted : Switched to lastpass from keepass a few years ago and have never looked back. I absolutely love it. My biggest thing with password managers is cross platform capabilities and many lack proper linux support (keepass + mono is awful). I also like the ability to open my passwords from my cell phone in case I am away from my own computer and want to login to something. Lastpass offers all of this and the best part is it offers it without any hassle involved. I use lastpass in combination with multifactor authentication and feel very safe.

I should also mention I used to be against lastpass especially since data is stored remotely, but after doing some research I realized I was being unreasonable. One thing to remember about lastpass, encryption is done LOCALLY. Using a strong password + multifactor there really is nothing to worry about. Another plus is you can limit logins based on country and block logins from TOR.

Re: Which password manager is the safest and most trustworthy?

Sun, 27 Jan 2013 11:06:11 EDT

Shady Bimmer posted : I'm a longtime KeePass user but have recently switched to 1Password.

said by Dustyn:

EDIT: Just read up how you should NOT keep the database file and the key file in the same folder/directory. So I may change that, but at the moment I'm not sure what the reason behind this is?

The purpose of the keyfile is an additional protection: an additional piece of information that would need to be obtained/compromised. In other words, compromise of your passphrase alone is not sufficient to gain access.

If you keep your keyfile and database together, there may be little additional security benefit over just using a strong passphrase (with no keyfile).

I kept my keyfile on a USB key that was also securely archived to protect in the event of a failure of the USB key.

There are a few threads in the KeePass forums which cover this question, but one recent one: »sourceforge.net/p/keepass/discus···d88d47c/

Re: Which password manager is the safest and most trustworthy?

Sat, 26 Jan 2013 21:26:26 EDT

Dustyn posted : This thread got me thinking about how it's waaaaaay past due for managing my passwords more effectively. After reinstalling Kepass Professional I'm liking it very much now!
When I tried it years ago I had some difficulties with it and not get it to work correctly. I can't remember if I was using the .NET version or not. Now it works just as I expect it too. Feel much better using secure unique passwords as I was using 1 -3 similar passwords across all sites I'm registered with. Absolutely horrid thing to do, but now I can safely say I'm done creating passwords that way. Now EVERY site; banking, community forums, e-mail... BBR ;) has a unique lengthy password (when allowed) that I don't even know. KeePass stores it all in a database file. :) Database file is backed up of course as part of my external system/data backup images, and a separate database file is backed up to a USB key.
EDIT: Just read up how you should NOT keep the database file and the key file in the same folder/directory. So I may change that, but at the moment I'm not sure what the reason behind this is? The keyfile itself is useless without the master password to the database file and the master password to the datasbase is useless without the keyfile... :hmm:
--
Remember that cool hidden "Graffiti Wall" here on BBR? After the name change I became the "owner", so to speak as it became: Dustyn's Wall »[Serious] RIP

Re: Which password manager is the safest and most trustworthy?

Sat, 26 Jan 2013 17:38:09 EDT

Creer posted : KeePass 2 user for years.

Re: Which password manager is the safest and most trustworthy?

Fri, 25 Jan 2013 13:25:26 EDT

anon posted : For an enterprise environment, I prefer Power LogOn from Access Smart.

Re: Which password manager is the safest and most trustworthy?

Tue, 22 Jan 2013 18:41:49 EDT

MarkAW posted : Been using Keepass2 for years and it hasn't let me down yet.

Re: Which password manager is the safest and most trustworthy?

Tue, 22 Jan 2013 18:29:01 EDT

Dustyn posted : I like using Post-it v1.0.
[att=1]
I've actually decided to start using KeePass Professional.

Re: Which password manager is the safest and most trustworthy?

Tue, 22 Jan 2013 14:04:23 EDT

Linklist posted :

said by pats_lose :

I find the password manager in my head is currently still safest and most trustworthy to date. :)

You must have a great memory. I have over 90 passwords to various sites. All are randomly generated and different from site to site. I am happy to just remember the passwords to the 2 password tools I use.
--
A democracy cannot exist as a permanent form of government. It can only exist until the voters discover that they can vote themselves money from the public treasury.

Re: Which password manager is the safest and most trustworthy?

Tue, 22 Jan 2013 14:02:05 EDT

Linklist posted :

said by therube:

Password Corral
Got to be safe. I'm likely the only one left using it :-).

Nope I use it too and have been for years.
--
A democracy cannot exist as a permanent form of government. It can only exist until the voters discover that they can vote themselves money from the public treasury.

Re: Which password manager is the safest and most trustworthy?

Tue, 22 Jan 2013 14:01:23 EDT

Linklist posted :

said by Mangix:

I use free LastPass. The main reason is all the integration with chrome and everything else. Website is nice as well.

I use Lastpass as well for maintaining passwords for all non-financial web sites. All the usual web sites like dslreports, facebook, msn it is good enough for me.

But for banks, brokerages, retail sites, health insurance site, etc. I use an offline tool: Password Corral 4.0.
--
A democracy cannot exist as a permanent form of government. It can only exist until the voters discover that they can vote themselves money from the public treasury.

Re: Which password manager is the safest and most trustworthy?

Tue, 22 Jan 2013 13:47:00 EDT

cuda7071 posted : Been using Roboform for years, never been sorry.

Re: Which password manager is the safest and most trustworthy?

Tue, 22 Jan 2013 11:05:10 EDT

anon posted :

said by DevilFrank:

I do use Password Depot since V3. It´s not for free but it´s worth the money in my eyes.

+1 :) . Very solid solution.

Re: Which password manager is the safest and most trustworthy?

Tue, 22 Jan 2013 10:51:21 EDT

Steve posted :

said by pats_lose :

I find the password manager in my head is currently still safest and most trustworthy to date. :)

Keeping stuff in your head means you're almost certainly reusing passwords, which is far worse than picking a bad password.

Re: Which password manager is the safest and most trustworthy?

Tue, 22 Jan 2013 09:52:09 EDT

angussf posted :

said by Aaron11 :

I personally use SplashData's SplashID Safe and for me it is safest and trustworthy because they are the longest-running developer with well established support. They created specialized a variety of confidential data security applications for different purposes, whether for personal, business or even company-level use.

SplashID has problems -- they encrypt EVERYONE'S password with the same fixed master key, so anyone who gets your phone can decrypt your data. Search for the word "SplashID" in this review of iOS Password Mismanagers:

Security Now! Transcript of Episode #347
»www.grc.com/sn/sn-347.htm

I don't know if the Android and PalmOS versions use the same bad design logic but I expect they do.
--
Angus S-F
GeoApps, Tucson, Arizona, USA
»geoapps.com/
»www.linkedin.com/in/angussf
»geoapps.blogspot.com/

Re: Which password manager is the safest and most trustworthy?

Mon, 21 Jan 2013 08:54:18 EDT

Link Logger posted : KeePass has never let me down or sold the farm, so I'll continue to use it on multiple devices.

Blake

Re: Which password manager is the safest and most trustworthy?

Mon, 21 Jan 2013 08:26:17 EDT

Drunkula posted : Keepass works for me. I even have it on my android.

Re: Which password manager is the safest and most trustworthy?

Mon, 21 Jan 2013 07:59:11 EDT

anon posted : I find the password manager in my head is currently still safest and most trustworthy to date. :)

Re: Which password manager is the safest and most trustworthy?

Mon, 21 Jan 2013 06:45:16 EDT

SwedishRider posted : I like 1Password for both MacOS and Windows. I've gotten great service from it for years.

Re: Which password manager is the safest and most trustworthy?

Mon, 21 Jan 2013 00:53:20 EDT

Madtown posted : I use Last Pass. What got me using Last Pass was the PSN hack that happened a while back, even though I'm an Xbox Live user.

Re: Which password manager is the safest and most trustworthy?

Sun, 20 Jan 2013 19:17:41 EDT

MorpheusUK posted : I use KeePass Password Safe 2.x (moved from 1.x as .NET is installed by default on Win 7 and above anyway). It also has the advantage of being supported on many platforms I used a version on my Symbian phone when I had one and now on Android and in my Linux boot. Few others are supported on as many platforms.
--
Just because you're paranoid, it doesn't mean they are not after you

Re: Which password manager is the safest and most trustworthy?

Sun, 20 Jan 2013 12:52:20 EDT

trparky posted : I use Lastpass myself but I have extra security enabled in which I have to use a six-digit code generated by Google Authenticator on my Android phone to log into my Lastpass account on unknown computers.

Obviously on my computers I don't need the six-digit code because I trust them but on untrusted computers I have to use Google Authenticator to login.
--
Tom
Boycott AT&T uVerse! | Tom's Android Blog | AOKP (The Android Open Kang Project)

Re: Which password manager is the safest and most trustworthy?

Sun, 20 Jan 2013 12:06:41 EDT

DownTheShore posted : I've used Password Agent for years, and it has worked well for me.

Re: Which password manager is the safest and most trustworthy?

Sun, 20 Jan 2013 10:58:07 EDT

Lagz posted : I use pin and paper. I guess if I didn't feel secure about my surroundings or I needed to hide some top secret military plans then that might be different.
--
When somebody tells you nothing is impossible, ask him to dribble a football.

Re: Which password manager is the safest and most trustworthy?

Sun, 20 Jan 2013 09:26:43 EDT

therube posted : Password Corral
Got to be safe. I'm likely the only one left using it :-).

Re: Which password manager is the safest and most trustworthy?

Sun, 20 Jan 2013 03:02:13 EDT

DevilFrank posted : I do use Password Depot since V3. It�s not for free but it�s worth the money in my eyes.
--
Regards from Germany. Please excuse my stumbling English

Re: Which password manager is the safest and most trustworthy?

Sun, 20 Jan 2013 02:01:21 EDT

Mangix posted : I use free LastPass. The main reason is all the integration with chrome and everything else. Website is nice as well.

It's using 500 iterations of PBKDF2-SHA256(i don't think HMAC) which makes it somewhat secure against cracking. But then again, the iteration count is adjustable and actually getting the database is pretty hard to do(gets deleted every time the browser closes).

So usability is the main reason I use it.

Re: Which password manager is the safest and most trustworthy?

Sat, 19 Jan 2013 21:52:37 EDT

no__1__here posted :

said by OZO:

I use free KeePass v1.x and think it's pretty safe... :)

Re: Which password manager is the safest and most trustworthy?

Sat, 19 Jan 2013 21:27:42 EDT

sbconslt posted : »passwordsafe.sourceforge.net/

Re: Which password manager is the safest and most trustworthy?

Sat, 19 Jan 2013 16:25:13 EDT

sivran posted : I prefer PasswordSafe 2.2. It's secure, doesn't store anything online, and highly portable (no dependencies like .NET). I can't speak for the newer versions.
--
Think Outside the Fox.

Re: Which password manager is the safest and most trustworthy?

Sat, 19 Jan 2013 15:42:49 EDT

OZO posted : I use free KeePass v1.x and think it's pretty safe... :)
--
Keep it simple, it'll become complex by itself...

Which password manager is the safest and most trustworthy?

Sat, 19 Jan 2013 14:29:09 EDT

anon posted : Keepass, Lastpass or RoboForm?