Go Back   Forums @ The Digital Fix > Gadgets and Gizmos > Computing Forum

Reply
 
Thread Tools Display Modes
Old 13-07-2014, 12:36   #61
driver8
M0D2.0 (trainee)
 
driver8's Avatar
 
Join Date: Jan 2003
Location: Malé, Maldives
Posts: 11,950
Thanks: 2,735
Thanked 2,860 Times in 1,254 Posts
So how easy are these to use ?
And do they do everything you need, so apart from the 'master password' there's no need to remember (or even know) any others ?
And do you change all your existing passwords (for Amazon, etc) into randomly generated ones, looked after by the app ?
driver8 is offline   Reply With Quote
Old 13-07-2014, 13:16   #62
ljp
learned 2 ape the motions
 
Join Date: Jul 2000
Posts: 6,403
Thanks: 101
Thanked 136 Times in 111 Posts
Another vote for lastpass, works well and takes the worry out of remembering anything other than the one you log in with.
ljp is offline   Reply With Quote
Old 13-07-2014, 15:55   #63
AndyWilson
--------old-geek
 
Join Date: Jun 2000
Posts: 12,012
Thanks: 127
Thanked 432 Times in 200 Posts
I used to use My Head - always worked really well and reliably and the information was available wherever I was and whatever device I was using. Lately though it's been having issues - I think it's getting a bit long in the tooth - and I don't think I can rely on it much longer
AndyWilson is offline   Reply With Quote
Old 13-07-2014, 22:26   #64
peg20
Trusted User
 
Join Date: Apr 2001
Location: London
Posts: 2,898
Thanks: 174
Thanked 46 Times in 44 Posts
Quote:
Originally Posted by driver8 View Post
Anyone tried more than one, to compare ? (Is there a good review roundup anywhere ?)
Sorry, I've only tried keepass, so will comment on that.

Quote:
Will I need to pay monthly/annually for the best solution (which I'd rather not have to do) or is there a 1-off payment (or completely free ?) method that is just as good as the big boys ?
KeePass is free for non-commercial use (at least). I've not looked into the cost for commercial use.

Quote:
How do the apps handle things like 1st/3rd/7th characters from your memorable word ?
KeePass doesn't. But it can show you the password (normally obscured by asterisks) so you can count yourself. :-)

Quote:
As for allowing your app to generate & manage all your passwords so even you don't know what they are - still seems weird to me - anyone come unstuck with this, say at a cybercafé or friend's house ?
KeePass has android and iphone apps. I keep my KeePass encrypted in BoxCryptor and then inside DropBox (again, both free for non-commercial use and available on android and iphone). So then I have access to my passwords wherever I go.

Hope this helps
peg20 is offline   Reply With Quote
Thanked 2 times by:
beebul (14-07-2014), driver8 (15-07-2014)
Old 14-07-2014, 00:14   #65
beebul
--- Pom in Oz----✈
 
beebul's Avatar
 
Join Date: Oct 2001
Location: Glenelg, Adelaide, South Australia
Posts: 3,658
Thanks: 185
Thanked 69 Times in 53 Posts
KeePass for me too, for both work and personal passwords.
beebul is offline   Reply With Quote
Old 14-07-2014, 07:48   #66
ljp
learned 2 ape the motions
 
Join Date: Jul 2000
Posts: 6,403
Thanks: 101
Thanked 136 Times in 111 Posts
http://www.theregister.co.uk/2014/07...lurting_codes/
ljp is offline   Reply With Quote
Old 15-07-2014, 12:28   #67
driver8
M0D2.0 (trainee)
 
driver8's Avatar
 
Join Date: Jan 2003
Location: Malé, Maldives
Posts: 11,950
Thanks: 2,735
Thanked 2,860 Times in 1,254 Posts
Thanks for all the suggestions.

So it looks like KeePass and LastPass are the favourites, with eWallet bringing up the rear.

It's surprising that one of the big boys hasn't created the ultimate cross-platform password manager app by now, although I suppose that might be a red rag to the pro hackers.

Anyone else with personal experiences to share ? Or a decent comparative online review anywhere ? Anyone with a cross-platform cost of ownership summary table ?
driver8 is offline   Reply With Quote
Old 15-07-2014, 17:49   #68
Anthony.S
XBL - AnthonyS UK
 
Join Date: Jul 2000
Location: Alton, Hants
Posts: 3,476
Thanks: 9
Thanked 184 Times in 176 Posts
For Lastpass I can really recommend the Yubico yubikey which adds two-factor authentication along with many other things. You could also use Google auth using an app on your phone.

http://www.yubico.com/products/yubik...dware/yubikey/
Anthony.S is offline   Reply With Quote
Old 16-07-2014, 10:26   #69
driver8
M0D2.0 (trainee)
 
driver8's Avatar
 
Join Date: Jan 2003
Location: Malé, Maldives
Posts: 11,950
Thanks: 2,735
Thanked 2,860 Times in 1,254 Posts
Sheesh - it really is complicated, and the main reason I've held off for so long !

What is the average person expected to do ?? No wonder there is so much cybercrime and so many 'qwerty123' passwords !
driver8 is offline   Reply With Quote
Old 16-07-2014, 10:59   #70
douglasb
Suedehead.
 
douglasb's Avatar
 
Join Date: Feb 2001
Location: Exiled in England
Posts: 11,173
Thanks: 149
Thanked 936 Times in 560 Posts
I just use a formula.

Say it was your Amazon account, you could do something like

Amazon567%^&Arsenal where the 2nd word is a football team with the same initial.

Your Play account would be

Play567%^&Portsmouth

Once you get into a routine, it's easy enough. If someone hacks a site and gets access to passwords, it doesn't matter how complex yours is - they have it. All you're looking for is something that would deter a basic brute force attack.
douglasb is offline   Reply With Quote
Old 16-07-2014, 11:49   #71
driver8
M0D2.0 (trainee)
 
driver8's Avatar
 
Join Date: Jan 2003
Location: Malé, Maldives
Posts: 11,950
Thanks: 2,735
Thanked 2,860 Times in 1,254 Posts
Thanks, Doug - yes, this iirc kind of thing was discussed earlier in the thread.

But I really need an app cos I've just got too many now (developing websites for people).
driver8 is offline   Reply With Quote
Old 16-07-2014, 11:50   #72
zharrt
PSN: zharrt1
 
Join Date: Mar 2011
Posts: 899
Thanks: 4
Thanked 54 Times in 21 Posts
Using 1password for a bit now and really like it, especially the programmable hot key to insert passwords into the browser, annoyingly though as more and more apps on my phone/tablet have passwords that seems to be the weak link in the chain, I know 1password has an iOS app but that just gives you access to the browser version of any sites etc which are impractical, guess I am going to have to generate new obscure passwords, key them in manually on the phone/ipad and then just up the screen lock from simple pin to complex password
zharrt is offline   Reply With Quote
Old 16-07-2014, 12:30   #73
Dave h-j
Suitable for vegetarians
 
Dave h-j's Avatar
 
Join Date: May 2000
Location: Strangely Northern
Posts: 3,855
Thanks: 31
Thanked 35 Times in 30 Posts
I use 1password on iOS. I used to have them ni my head, but i having to request more and more reset requests. I don;t bother with highly complex passwords, as there i no way I would be able to recall them easily and be able to type them in reasonably quickly.

So I either use:
keyboard patterns (so I couldn't tell you what the password is, but I know how to recreate it)

Word patterns (based on object verb object). Such as: Y0u kick ball!

I also try and use different usernames too, so a certain amount of reuse of password can be done.

It's mainly websites and some other services - banking is still all in my head
Dave h-j is offline   Reply With Quote
Old 16-07-2014, 13:59   #74
peg20
Trusted User
 
Join Date: Apr 2001
Location: London
Posts: 2,898
Thanks: 174
Thanked 46 Times in 44 Posts
Nice. I'm glad I keep mine in my own storage rather than in a random service. (And yes, mine are in Dropbox, but that requires someone cracking both keepass encryption, boxcryptor encryption and hacking dropbox.)
peg20 is offline   Reply With Quote
Old 16-07-2014, 15:34   #75
driver8
M0D2.0 (trainee)
 
driver8's Avatar
 
Join Date: Jan 2003
Location: Malé, Maldives
Posts: 11,950
Thanks: 2,735
Thanked 2,860 Times in 1,254 Posts
PC Pro (Mar-13) : Password managers: Are they safe? Which is the best?

PCW (Feb-14) : 5 password managers that protect your personal data too

PCM (Apr-14) : The Best Password Managers

DashLane and Norton ID Safe have joined LastPass and 1password on my shortlist ...
driver8 is offline   Reply With Quote
Old 16-07-2014, 16:10   #76
Tempest
Trusted User
 
Tempest's Avatar
 
Join Date: Jun 2000
Location: Horley (Gatwick)
Posts: 27,940
Thanks: 1,346
Thanked 1,012 Times in 608 Posts
You know what would help us all a LOT, and I know it's a crazy stupid idea as it involves humans coming together and actually agreeing on something. (typically a very hard thing to do)
That would be for everyone to agree to the same type of password on all web sites, and perhaps even all devices.

Not one place that says must include a letter, when another place does not need that, one place saying can be up to 50 characters long, another saying max 10 letters.
Some allowing the odd character "!/- when others places saying NONONO only a-z

It would at least allow people around the world to actually have a password system that they could use always. Not a great system, but 1/4 of their web sites won't allow that type of password.

On the other hand, realistically would there be ANY scope in the future of some body part scanning? Again, someone pretty much everyone could agree on.
Tempest is offline   Reply With Quote
Old 16-07-2014, 18:45   #77
Anthony.S
XBL - AnthonyS UK
 
Join Date: Jul 2000
Location: Alton, Hants
Posts: 3,476
Thanks: 9
Thanked 184 Times in 176 Posts
Quote:
Originally Posted by Tempest View Post
You know what would help us all a LOT, and I know it's a crazy stupid idea as it involves humans coming together and actually agreeing on something. (typically a very hard thing to do)
That would be for everyone to agree to the same type of password on all web sites, and perhaps even all devices.

Not one place that says must include a letter, when another place does not need that, one place saying can be up to 50 characters long, another saying max 10 letters.
Some allowing the odd character "!/- when others places saying NONONO only a-z

It would at least allow people around the world to actually have a password system that they could use always. Not a great system, but 1/4 of their web sites won't allow that type of password.

On the other hand, realistically would there be ANY scope in the future of some body part scanning? Again, someone pretty much everyone could agree on.
I don't think I could disagree more TBH. Having a standard would just make it easier to compromise. Traditional passwords are not long for this world I think anyway.
Anthony.S is offline   Reply With Quote
Old 16-07-2014, 22:35   #78
Tempest
Trusted User
 
Tempest's Avatar
 
Join Date: Jun 2000
Location: Horley (Gatwick)
Posts: 27,940
Thanks: 1,346
Thanked 1,012 Times in 608 Posts
Quote:
Originally Posted by Anthony.S View Post
I don't think I could disagree more TBH. Having a standard would just make it easier to compromise. Traditional passwords are not long for this world I think anyway.
I disagree back

When I say a standard, I mean it allows you full range to have a good password, and not limit you.

If you CAN have say A-Z and 0-9 And a range of !"£$%^ in there, on every site, then that would be better than some other sites limiting you.

I am against the limiting sites, and saying that all sites should adopt the acceptance of the full range so you can think up a nice password/s and not have to come up with limited ones due to some site having it's own less secure rules.
Tempest is offline   Reply With Quote
Old 05-10-2016, 08:00   #79
driver8
M0D2.0 (trainee)
 
driver8's Avatar
 
Join Date: Jan 2003
Location: Malé, Maldives
Posts: 11,950
Thanks: 2,735
Thanked 2,860 Times in 1,254 Posts
Has anyone got any new experiences with password managers, good or bad ?

What's currently considered the best (easiest) solution across Android and Windows devices ?

Good article here - What the Dropbox Hack Can Teach You About the State of Web Security

And the rather worrying: Pwned Websites - see if your email address or user name is featured in online lists, publicly dumped and readily available.

Password Manager Reviews

Last edited by driver8; 05-10-2016 at 08:19.
driver8 is offline   Reply With Quote
Thanked once by:
Chris Locke (05-10-2016)
Old 05-10-2016, 10:49   #80
zantarous
Xbox Live tag: wargame
 
zantarous's Avatar
 
Join Date: Oct 2002
Location: London
Posts: 10,946
Thanks: 153
Thanked 305 Times in 221 Posts
I recently started using LastPass and it does what it should, works really well on android and chrome on windows. Now every site I sign up to has a unique password and I can change them with ease. I don't need to remember anything apart from the master password.
zantarous is offline   Reply With Quote
Reply

Bookmarks

Tags
hacking, passwords, Phishing, threat

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
It's time to update my web site.... Guest 17513 Computing Forum 42 15-03-2012 15:21
Nokia: Auto-update of date & time Guest 20850 Mobile Phone and Satellite Navigation Forum 11 02-11-2008 01:18
SE W950i time update problem MaleStrom Mobile Phone and Satellite Navigation Forum 1 17-04-2007 19:11
Windows Update time again internetuser Computing Forum 10 10-02-2005 01:33

All times are GMT. The time now is 05:30.


Powered by vBulletin® Version 3.8.9
Copyright ©2000 - 2021, vBulletin Solutions, Inc.qq
Copyright ©2000 - 2021 Network N Ltd.