Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.misc > #1466 > unrolled thread

Ask Usenet: How do you manage your passwords?

Back to article view | Back to comp.misc

Contents

  Ask Usenet: How do you manage your passwords? Randy Westlund <Vorzakir@invalid.invalid> - 2014-03-11 16:18 +0000
    Re: Ask Usenet: How do you manage your passwords? Rich <rich@example.com> - 2014-03-11 17:14 +0000
      Re: Ask Usenet: How do you manage your passwords? Randy Westlund <Vorzakir@invalid.invalid> - 2014-03-11 21:14 +0000
        Re: Ask Usenet: How do you manage your passwords? Rich <rich@example.com> - 2014-03-12 02:49 +0000
          Re: Ask Usenet: How do you manage your passwords? Randy Westlund <Vorzakir@invalid.invalid> - 2014-03-12 04:08 +0000
            Re: Ask Usenet: How do you manage your passwords? Oregonian Haruspex <bob_davis_retired@yahoo.com> - 2014-03-12 08:08 +0000
              Re: Ask Usenet: How do you manage your passwords? Randy Westlund <Vorzakir@invalid.invalid> - 2014-03-12 08:26 +0000
    Re: Ask Usenet: How do you manage your passwords? Tim Watts <tw_usenet@dionic.net> - 2014-03-11 17:20 +0000
      Re: Ask Usenet: How do you manage your passwords? Jerry Peters <jerry@example.invalid> - 2014-03-11 20:24 +0000
        Re: Ask Usenet: How do you manage your passwords? Tim Watts <tw_usenet@dionic.net> - 2014-03-11 20:48 +0000
    Re: Ask Usenet: How do you manage your passwords? Oregonian Haruspex <bob_davis_retired@yahoo.com> - 2014-03-11 19:49 +0000
    Re: Ask Usenet: How do you manage your passwords? Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-03-11 20:49 +0000
    Re: Ask Usenet: How do you manage your passwords? "Andy K." <andy.k466@gmail.com> - 2014-03-11 23:17 +0100
      Re: Ask Usenet: How do you manage your passwords? Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-03-12 01:01 +0000
      Re: Ask Usenet: How do you manage your passwords? Huge <Huge@nowhere.much.invalid> - 2014-03-12 09:43 +0000
        Re: Ask Usenet: How do you manage your passwords? Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-03-12 21:15 +0000
    Re: Ask Usenet: How do you manage your passwords? Dave Royal <dave@dave123royal.com> - 2014-03-12 08:04 +0000
      Re: Ask Usenet: How do you manage your passwords? Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-03-12 08:58 +0000
        Re: Ask Usenet: How do you manage your passwords? Dave Royal <dave@dave123royal.com> - 2014-03-12 09:07 +0000
        Re: Ask Usenet: How do you manage your passwords? Memnon Anon <memnon+usenet@freeshell.org> - 2014-03-12 11:04 +0000
          Re: Ask Usenet: How do you manage your passwords? Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-03-12 21:04 +0000
    Re: Ask Usenet: How do you manage your passwords? Morten Nygaard Åsnes <mnaasnes@gmail.com> - 2014-03-12 12:46 +0100
    Re: Ask Usenet: How do you manage your passwords? Spalls Hurgenson <spallshurgenson@gmail.com> - 2014-03-12 10:16 -0400
    Re: Ask Usenet: How do you manage your passwords? RS Wood <rsw@therandymon.com> - 2014-03-12 14:21 +0000
      Re: Ask Usenet: How do you manage your passwords? Rich <rich@example.com> - 2014-03-12 16:21 +0000
      Re: Ask Usenet: How do you manage your passwords? David Jones <david.jones@fmail.co.uk> - 2014-03-12 16:43 +0000
        Re: Ask Usenet: How do you manage your passwords? RS Wood <rsw@therandymon.com> - 2014-03-12 17:14 +0000
          Re: Ask Usenet: How do you manage your passwords? Randy Westlund <Vorzakir@invalid.invalid> - 2014-03-13 06:32 +0000
    Re: Ask Usenet: How do you manage your passwords? "q.kontinuum" <achsis_of_elvis@yahoo.co.uk> - 2014-03-17 07:41 +0100

Page 1 of 2  [1] 2  Next page →

#1466 — Ask Usenet: How do you manage your passwords?

My parents had their ebay account hacked last night, and the guy who
had control of it was buying dodgecoin and litecoin as fast as he
could.  I'm helping them deal with the situation, and finally
convinced them not to use the same dictionary word as a password on
all their accounts.  The incident has caused me to reflect on how I
can better manage my own passwords.

Currently, I use a common crappy password on unimportant sites, and
a serious one for important accounts with a common base that varies
based on the domain name.  But I'm worried that if a human were to
recover the plaintext of my password for one site, they may be able
to figure out my passwords for other sites as well.

I'm really curious about password managers such as LastPass,
KeePass, and pass.

https://lastpass.com/
http://keepass.info/
http://www.zx2c4.com/projects/password-store/

I really like the ability to use ridiculously strong passwords, but
I'm concerned about limited accessibility to them.  What if I need
to check my account balance on my phone when I'm out at a store
somewhere?  What if I'm on someone else's windows machine and can't
ssh into my server (assuming I use pass) or my browser plugins
(assuming I use a browser-based utility).  This is the trade-off
between security and convenience, and finding the right balance is
difficult.

For those of you who use password managers, how do you handle these
situations?  For those of you who don't, what password management
strategy do you use?

[toc] | [next] | [standalone]

#1468

Randy Westlund <Vorzakir@invalid.invalid> wrote:
> ... I'm helping them deal with the situation, and finally
> convinced them not to use the same dictionary word as a password on
> all their accounts.

Good. 

> The incident has caused me to reflect on how I can better manage my
> own passwords.

You might also reflect on how to help them not use the same password
everywhere as well.

> I'm really curious about password managers such as LastPass,
> KeePass, and pass.

You forgot Password Gorilla: https://github.com/zdia/gorilla/wiki

It has Linux, Mac, and Windows versions, and because it uses the
PasswordSafe file format, there are also several Android apps that can
interoperate with the same file.  Scroll down the page above for links
to a few Android apps.

What it lets you do is use a separate password, randomly generated (it
will generate them for you), and as long as the site allows (you can
tune the size/characters for each one when generating it) for each
different location where you log in.  You, however, only need to
remember the master password to unlock your safe to gain access to all
your passwords.

> I really like the ability to use ridiculously strong passwords, but
> I'm concerned about limited accessibility to them.  What if I need
> to check my account balance on my phone when I'm out at a store
> somewhere?

Then you need a compatible app. on your phone.  There are several that
are PasswordSafe compatible.

< What if I'm on someone else's windows machine and can't ssh into my
> server (assuming I use pass) or my browser plugins (assuming I use a
> browser-based utility).

You can drop a windows executable for Password Gorilla (it is a single
.exe, no install necessary) and your password file onto a USB dongle
and carry it with you.  Note, if your buddies window's machine is
infested with key loggers (as so many are) then you'll be revealing
your master password and the password you use to ssh into your server
to the key logger, so be careful here.

> This is the trade-off between security and convenience, and finding
> the right balance is difficult.

Smartphone app. for phone use.  USB dongle with Linux/Mac/Windows
executables for other use.  Just be careful and you are otherwise good
to go.

[toc] | [prev] | [next] | [standalone]

#1486

On 2014-03-11, Rich wrote:
> Randy Westlund <Vorzakir@invalid.invalid> wrote:
>> I really like the ability to use ridiculously strong passwords, but
>> I'm concerned about limited accessibility to them.  What if I need
>> to check my account balance on my phone when I'm out at a store
>> somewhere?
>
> Then you need a compatible app. on your phone.  There are several that
> are PasswordSafe compatible.

I've been hesitant to trust my phone.  It makes me uneasy that my
email account is only protected by a 5-digit pin when phones are so
easy to lose.  I've kept my private keys off of it for that reason,
which means I can't sign an email that I send from my phone.

Maybe it's time I started trusting it.  How do you protect it from
theft?  Do you use a long password to unlock it?  Do you trust
things like unlocking by facial recognition?  Does using a custom
(root access) ROM give you more security options?

[toc] | [prev] | [next] | [standalone]

#1498

Randy Westlund <Vorzakir@invalid.invalid> wrote:
> On 2014-03-11, Rich wrote:
> > Randy Westlund <Vorzakir@invalid.invalid> wrote:
> >> I really like the ability to use ridiculously strong passwords,
> >> but I'm concerned about limited accessibility to them.  What if I
> >> need to check my account balance on my phone when I'm out at a
> >> store somewhere?
> >
> > Then you need a compatible app. on your phone.  There are several
> > that are PasswordSafe compatible.

> I've been hesitant to trust my phone.  It makes me uneasy that my
> email account is only protected by a 5-digit pin when phones are so
> easy to lose.  I've kept my private keys off of it for that reason,
> which means I can't sign an email that I send from my phone.

That is a risk.  A 5 digit pin is only 100000 possible combinations. 
Although with something like a password safe compatible app., you will
still have to enter your password safe master password to gain access
to the stored passwords.  The master password is integral to decrypting
the storage file format.  Without it, the file remains encrypted.

> Maybe it's time I started trusting it.  How do you protect it from
> theft?  Do you use a long password to unlock it?  Do you trust things
> like unlocking by facial recognition?  Does using a custom (root
> access) ROM give you more security options?

Myself, I don't have a smart phone, so there's nothing to steal, and
therefore, nothing to protect.

[toc] | [prev] | [next] | [standalone]

#1499

On 2014-03-12, Rich wrote:
> Randy Westlund <Vorzakir@invalid.invalid> wrote:
>> I've been hesitant to trust my phone.  It makes me uneasy that my
>> email account is only protected by a 5-digit pin when phones are so
>> easy to lose.  I've kept my private keys off of it for that reason,
>> which means I can't sign an email that I send from my phone.
>
> That is a risk.  A 5 digit pin is only 100000 possible combinations. 
> Although with something like a password safe compatible app., you will
> still have to enter your password safe master password to gain access
> to the stored passwords.  The master password is integral to decrypting
> the storage file format.  Without it, the file remains encrypted.

I have a USB rubber ducky, which is a keystroke injection tool:
https://hakshop.myshopify.com/products/usb-rubber-ducky-deluxe

With a quick ducky script to brute force a 4-digit pin and a USB OTG
adapter, I can get into any android with a 4-digit pin in about 16
hours, tops.  For a five digit pin, I believe the time required was
just under a week.  Custom ROMs may be better, but stock android
just lets you keep guessing without penalty until you get it right.
Scary stuff, especially once you've done it to yourself and seen how
easy it is.

[toc] | [prev] | [next] | [standalone]

#1504

Randy Westlund <Vorzakir@invalid.invalid> wrote:
> On 2014-03-12, Rich wrote:
>> Randy Westlund <Vorzakir@invalid.invalid> wrote:
>>> I've been hesitant to trust my phone.  It makes me uneasy that my
>>> email account is only protected by a 5-digit pin when phones are so
>>> easy to lose.  I've kept my private keys off of it for that reason,
>>> which means I can't sign an email that I send from my phone.
>> 
>> That is a risk.  A 5 digit pin is only 100000 possible combinations. 
>> Although with something like a password safe compatible app., you will
>> still have to enter your password safe master password to gain access
>> to the stored passwords.  The master password is integral to decrypting
>> the storage file format.  Without it, the file remains encrypted.
> 
> I have a USB rubber ducky, which is a keystroke injection tool:
> https://hakshop.myshopify.com/products/usb-rubber-ducky-deluxe
> 
> With a quick ducky script to brute force a 4-digit pin and a USB OTG
> adapter, I can get into any android with a 4-digit pin in about 16
> hours, tops.  For a five digit pin, I believe the time required was
> just under a week.  Custom ROMs may be better, but stock android
> just lets you keep guessing without penalty until you get it right.
> Scary stuff, especially once you've done it to yourself and seen how
> easy it is.

Neat gadget, neat store.  Thanks for the post.  Looks like my monthly fun
budget is about to get blown on hacker toys!

[toc] | [prev] | [next] | [standalone]

#1506

On 2014-03-12, Oregonian Haruspex wrote:
> Randy Westlund <Vorzakir@invalid.invalid> wrote:
>> I have a USB rubber ducky, which is a keystroke injection tool:
>> https://hakshop.myshopify.com/products/usb-rubber-ducky-deluxe
>> 
>> With a quick ducky script to brute force a 4-digit pin and a USB OTG
>> adapter, I can get into any android with a 4-digit pin in about 16
>> hours, tops.  For a five digit pin, I believe the time required was
>> just under a week.  Custom ROMs may be better, but stock android
>> just lets you keep guessing without penalty until you get it right.
>> Scary stuff, especially once you've done it to yourself and seen how
>> easy it is.
>
> Neat gadget, neat store.  Thanks for the post.  Looks like my monthly fun
> budget is about to get blown on hacker toys!

There are plenty of unsavory things you can do with it (give it a
fake label, drop on ground outside business, hide in van outside,
wait for someone to plug it in to a computer to see what it is, take
over their network, etc), but I've also found innocent uses for it
with setting up complicated keyboard macros.  Watching it open
notepad and type out a document never gets old.

On the down side, my fiancee won't let me touch her computer anymore
after I showed her what I could do with it :P

While you're on the site, check out the wifi pineapple and throwing
star LAN tap.  I've been meaning to get those too, but haven't had
the time to play with them.  Or a real reason to have them.

[toc] | [prev] | [next] | [standalone]

#1469

On 11/03/14 16:18, Randy Westlund wrote:
> My parents had their ebay account hacked last night, and the guy who
> had control of it was buying dodgecoin and litecoin as fast as he
> could.  I'm helping them deal with the situation, and finally
> convinced them not to use the same dictionary word as a password on
> all their accounts.  The incident has caused me to reflect on how I
> can better manage my own passwords.
>
> Currently, I use a common crappy password on unimportant sites, and
> a serious one for important accounts with a common base that varies
> based on the domain name.  But I'm worried that if a human were to
> recover the plaintext of my password for one site, they may be able
> to figure out my passwords for other sites as well.
>
> I'm really curious about password managers such as LastPass,
> KeePass, and pass.
>
> https://lastpass.com/
> http://keepass.info/
> http://www.zx2c4.com/projects/password-store/
>
> I really like the ability to use ridiculously strong passwords, but
> I'm concerned about limited accessibility to them.  What if I need
> to check my account balance on my phone when I'm out at a store
> somewhere?  What if I'm on someone else's windows machine and can't
> ssh into my server (assuming I use pass) or my browser plugins
> (assuming I use a browser-based utility).  This is the trade-off
> between security and convenience, and finding the right balance is
> difficult.
>
> For those of you who use password managers, how do you handle these
> situations?  For those of you who don't, what password management
> strategy do you use?
>

I use KeePassX - and a compatible app for Android. I keep the master 
file on a USB stick (Corsair Survivor - nearly indestructible) and a 
second copy on my phone.

I use it so often I never forget my mentally long passphrase. This means 
I can have loads of weird and non dictionary passwords for sites that 
matter.

Works for me and SWMBO

[toc] | [prev] | [next] | [standalone]

#1481

Tim Watts <tw_usenet@dionic.net> wrote:
> On 11/03/14 16:18, Randy Westlund wrote:
>> My parents had their ebay account hacked last night, and the guy who
>> had control of it was buying dodgecoin and litecoin as fast as he
>> could.  I'm helping them deal with the situation, and finally
>> convinced them not to use the same dictionary word as a password on
>> all their accounts.  The incident has caused me to reflect on how I
>> can better manage my own passwords.
>>
>> Currently, I use a common crappy password on unimportant sites, and
>> a serious one for important accounts with a common base that varies
>> based on the domain name.  But I'm worried that if a human were to
>> recover the plaintext of my password for one site, they may be able
>> to figure out my passwords for other sites as well.
>>
>> I'm really curious about password managers such as LastPass,
>> KeePass, and pass.
>>
>> https://lastpass.com/
>> http://keepass.info/
>> http://www.zx2c4.com/projects/password-store/
>>
>> I really like the ability to use ridiculously strong passwords, but
>> I'm concerned about limited accessibility to them.  What if I need
>> to check my account balance on my phone when I'm out at a store
>> somewhere?  What if I'm on someone else's windows machine and can't
>> ssh into my server (assuming I use pass) or my browser plugins
>> (assuming I use a browser-based utility).  This is the trade-off
>> between security and convenience, and finding the right balance is
>> difficult.
>>
>> For those of you who use password managers, how do you handle these
>> situations?  For those of you who don't, what password management
>> strategy do you use?
>>
> 
> I use KeePassX - and a compatible app for Android. I keep the master 
> file on a USB stick (Corsair Survivor - nearly indestructible) and a 
> second copy on my phone.
> 
> I use it so often I never forget my mentally long passphrase. This means 
> I can have loads of weird and non dictionary passwords for sites that 
> matter.
> 
> Works for me and SWMBO

Same here, been using Keepassx for years now. It replaced a file
folder full of post-it notes. I use the Comments section to keep
track of the "secret questions"  sites use for additional validation
or password reset. Beats trying to remember "your favorite movie star"
of 10 years ago.

[toc] | [prev] | [next] | [standalone]

#1483

On 11/03/14 20:24, Jerry Peters wrote:

> Same here, been using Keepassx for years now. It replaced a file
> folder full of post-it notes. I use the Comments section to keep
> track of the "secret questions"  sites use for additional validation
> or password reset. Beats trying to remember "your favorite movie star"
> of 10 years ago.

The way I do it is to format the password field like this:

[PW=????] [Mother's maiden name=????] [Pet=????]

The advantage is that the password field comes up obscured by default so 
people can't so easily catch a glimpse until you are ready to "show 
password" for a few seconds.

Disadvantage - copy2clipboard doesn't work - but I don't use that so much.

My only complaint about KeePassX is that last time I looked at the 
source, it did not mlock() its memory pages (the ones with secret data) 
which means a significant danger of getting your cleartext passwords 
left smeared over the swap device.

[toc] | [prev] | [next] | [standalone]

#1478

Randy Westlund <Vorzakir@invalid.invalid> wrote:
> My parents had their ebay account hacked last night, and the guy who
> had control of it was buying dodgecoin and litecoin as fast as he
> could.  I'm helping them deal with the situation, and finally
> convinced them not to use the same dictionary word as a password on
> all their accounts.  The incident has caused me to reflect on how I
> can better manage my own passwords.
> 
> Currently, I use a common crappy password on unimportant sites, and
> a serious one for important accounts with a common base that varies
> based on the domain name.  But I'm worried that if a human were to
> recover the plaintext of my password for one site, they may be able
> to figure out my passwords for other sites as well.
> 
> I'm really curious about password managers such as LastPass,
> KeePass, and pass.
> 
> https://lastpass.com/
> http://keepass.info/
> http://www.zx2c4.com/projects/password-store/
> 
> I really like the ability to use ridiculously strong passwords, but
> I'm concerned about limited accessibility to them.  What if I need
> to check my account balance on my phone when I'm out at a store
> somewhere?  What if I'm on someone else's windows machine and can't
> ssh into my server (assuming I use pass) or my browser plugins
> (assuming I use a browser-based utility).  This is the trade-off
> between security and convenience, and finding the right balance is
> difficult.
> 
> For those of you who use password managers, how do you handle these
> situations?  For those of you who don't, what password management
> strategy do you use?

I use a password theme based upon number-ified compound words taken from
certain disused languages, each password being crafted as a pun on the name
or function of the site it is for.  I don't trust computer storage of
passwords because of obvious reasons.  If I do write down a password it is
in my personal cypher, and then it gets placed into my safe.  Only my wife
knows how to decode my personal cypher.

[toc] | [prev] | [next] | [standalone]

#1484

In message <lfnd0s$61k$1@dont-email.me> 
  Randy Westlund <Vorzakir@invalid.invalid> wrote:
> My parents had their ebay account hacked last night, and the guy who
> had control of it was buying dodgecoin and litecoin as fast as he
> could.  I'm helping them deal with the situation, and finally
> convinced them not to use the same dictionary word as a password on
> all their accounts.  The incident has caused me to reflect on how I
> can better manage my own passwords.

> Currently, I use a common crappy password on unimportant sites, and
> a serious one for important accounts with a common base that varies
> based on the domain name.  But I'm worried that if a human were to
> recover the plaintext of my password for one site, they may be able
> to figure out my passwords for other sites as well.

> I'm really curious about password managers such as LastPass,
> KeePass, and pass.

> https://lastpass.com/
> http://keepass.info/
> http://www.zx2c4.com/projects/password-store/

> I really like the ability to use ridiculously strong passwords, but
> I'm concerned about limited accessibility to them.  What if I need
> to check my account balance on my phone when I'm out at a store
> somewhere?  What if I'm on someone else's windows machine and can't
> ssh into my server (assuming I use pass) or my browser plugins
> (assuming I use a browser-based utility).  This is the trade-off
> between security and convenience, and finding the right balance is
> difficult.

> For those of you who use password managers, how do you handle these
> situations?  For those of you who don't, what password management
> strategy do you use?

I use 1Password which I keep on Dropbox. I have apps for ios, OS X, and
Windohs to access the password. If I really need to, I can open up the
secured html file inside the keychain bundle and unlock the keychain
there. Because the database is on Dropbox it's also on every computer
and iOS device I have.

-- 
The brain is an amazing organ, it works every second of every day
from before we're even born right up until the instant we fall in
love.

[toc] | [prev] | [next] | [standalone]

#1487

On Tue, 11 Mar 2014 16:18:37 +0000 (UTC)
Randy Westlund <Vorzakir@invalid.invalid> wrote:

> For those of you who use password managers, how do you handle these
> situations?  For those of you who don't, what password management
> strategy do you use?

I just remember them all. I imagine this will change with increasing age, but
so far, my fingers are remembering all my passwords better than my brain.

-- 
Andy

[toc] | [prev] | [next] | [standalone]

#1493

In message <20140311231722.502f5b04.andy.k466@gmail.com> 
  Andy K. <andy.k466@gmail.com> wrote:
> On Tue, 11 Mar 2014 16:18:37 +0000 (UTC)
> Randy Westlund <Vorzakir@invalid.invalid> wrote:

>> For those of you who use password managers, how do you handle these
>> situations?  For those of you who don't, what password management
>> strategy do you use?

> I just remember them all. I imagine this will change with increasing age, but
> so far, my fingers are remembering all my passwords better than my brain.

Then either you have very few passwords or very bad passwords or you
reuse passwords.

-- 
"you'd think you could trust a horde of hungarian barbarians"

[toc] | [prev] | [next] | [standalone]

#1511

On 2014-03-11, Andy K. <andy.k466@gmail.com> wrote:
> On Tue, 11 Mar 2014 16:18:37 +0000 (UTC)
> Randy Westlund <Vorzakir@invalid.invalid> wrote:
>
>> For those of you who use password managers, how do you handle these
>> situations?  For those of you who don't, what password management
>> strategy do you use?
>
> I just remember them all. I imagine this will change with increasing age, but
> so far, my fingers are remembering all my passwords better than my brain.

Really?

(Looks in encrypted password database.)

I have 79 (different) passwords. Can you really remember that many?


-- 
Today is Sweetmorn, the 71st day of Chaos in the YOLD 3180
A non-empty Hausdorff topological space is a continuous image of the unit
interval if and only if it is a compact, connected, locally connected
second-countable space.

[toc] | [prev] | [next] | [standalone]

#1539

In message <boaohqFh9e4U7@mid.individual.net> 
  Huge <Huge@nowhere.much.invalid> wrote:
> On 2014-03-11, Andy K. <andy.k466@gmail.com> wrote:
>> On Tue, 11 Mar 2014 16:18:37 +0000 (UTC)
>> Randy Westlund <Vorzakir@invalid.invalid> wrote:
>>
>>> For those of you who use password managers, how do you handle these
>>> situations?  For those of you who don't, what password management
>>> strategy do you use?
>>
>> I just remember them all. I imagine this will change with increasing age, but
>> so far, my fingers are remembering all my passwords better than my brain.

> Really?

> (Looks in encrypted password database.)

> I have 79 (different) passwords. Can you really remember that many?

I have 948.

-- 
'Can't argue with the truth, sir.' 'In my experience, Vimes, you can
argue with anything.'

[toc] | [prev] | [next] | [standalone]

#1503

On Tue, 11 Mar 2014 16:18:37 +0000, Randy Westlund wrote:

> 
> For those of you who use password managers, how do you handle these
> situations?  For those of you who don't, what password management
> strategy do you use?

Text file, symmetrically encrypted with GPG. Free format allows me to 
store anything, and I reckon it will probably be good for any device in 
the future - I or my heirs might need this data in 20 years time. 

There is a gpg app for both Android and iOS.

[toc] | [prev] | [next] | [standalone]

#1507

In message <lfp4eo$mue$1@dont-email.me> 
  Dave Royal <dave@dave123royal.com> wrote:
> On Tue, 11 Mar 2014 16:18:37 +0000, Randy Westlund wrote:

>> 
>> For those of you who use password managers, how do you handle these
>> situations?  For those of you who don't, what password management
>> strategy do you use?

> Text file, symmetrically encrypted with GPG. Free format allows me to 
> store anything, and I reckon it will probably be good for any device in 
> the future - I or my heirs might need this data in 20 years time. 

Doesn't allow you to store screeshots, scans of important documents, and
the organization of a single file is... well, dreadful. My 1Password
file is just as transportable as your text file, but much more capable.

-- 
May you live in interesting times

[toc] | [prev] | [next] | [standalone]

#1508

On Wed, 12 Mar 2014 08:58:02 +0000, Lewis wrote:

> In message <lfp4eo$mue$1@dont-email.me>
>   Dave Royal <dave@dave123royal.com> wrote:
>> On Tue, 11 Mar 2014 16:18:37 +0000, Randy Westlund wrote:
> 
> 
>>> For those of you who use password managers, how do you handle these
>>> situations?  For those of you who don't, what password management
>>> strategy do you use?
> 
>> Text file, symmetrically encrypted with GPG. Free format allows me to
>> store anything, and I reckon it will probably be good for any device in
>> the future - I or my heirs might need this data in 20 years time.
> 
> Doesn't allow you to store screeshots, scans of important documents, and
> the organization of a single file is... well, dreadful. My 1Password
> file is just as transportable as your text file, but much more capable.

I'm very happy for you.

It does what I want. I started with this system 10 years ago, before 
Dropbox, Android, and iOS was invented. 

[toc] | [prev] | [next] | [standalone]

#1513

Lewis <g.kreme@gmail.com.dontsendmecopies> writes:

> In message <lfp4eo$mue$1@dont-email.me> 
> Dave Royal <dave@dave123royal.com> wrote:
>> On Tue, 11 Mar 2014 16:18:37 +0000, Randy Westlund wrote:
>> Text file, symmetrically encrypted with GPG. 

+1. 

> Doesn't allow you to store screeshots, scans of important documents, 

? 
This thread is about storing your passwords in a secure way.
How exactly are scans of important documents related to that?

> and the organization of a single file is... well, dreadful. 

Not at all: http://orgmode.org/ , and you have a nice little
table editor in plain ascii. I'm sure vim has something similar.

mem
-- 
/-------------------------------------------\
| SDF and SDF-EU Public Access UNIX System  |
| http://sdf.org   ||   http://sdf-eu.org   |
=============================================

[toc] | [prev] | [next] | [standalone]

Page 1 of 2  [1] 2  Next page →

Back to top | Article view | comp.misc

csiph-web