Password managers

[Input Nirvana]

I've been consolidating, organizing, cleaning up, deleting various online shizz. I'm looking to use password managers/related type software. I use OSX and iOS and want to access things from both types of device. Apple has their new iCloud Keychain on Mavericks and iOS7 which is free, but more importantly is tightly integrated with the OS and allows major convenience being able to use across Apple devices.


What do you guys use, what have you used and what do you like/not like?

[Hundrakia]

I can't bring myself to aggregate mine into a manager  I've been brainwashed I suppose

[Novus]

Lastpass for me!

[Belfong]

KeePass, mini KeePass (iOS) and MacKeePass. Open  source and very very secure.

[paicrai]

yeah just give me your passwords I'll help

[caesar]

i use keepassx

[Belfong]

i use keepassx

Mac KeePass have better interface.

[caesar]

may be, but i can use it on windows, linux and mac <3

[EpicSNES]

I know a lot of people who use LastPass and like it.

[osi]

Personally, I don't use a password manager but for shared environments, keepass works like a charm

[mashby]

1Password gets my vote. It's not free, but I've been a user since 2007 and highly, highly recommend it.

You can have separate vaults, so I have one for work, one for personal and one that my wife and I share. Works on Windows, Mac, iOS and Android. You can even have it work in the browser via Dropbox if you want.

[dorkvader]

I was thinking about using the following:
http://16s.us/sha1_pass.html

Here's the reasoning behind it:
http://16s.us/software/SHA1_Pass/sha1_pass_why.txt

It's based on the principle of generating your passwords instead of storing them on potentially unsafe servers or with potentially weak encryption.

[microsoft windows]

1Password gets my vote. It's not free, but I've been a user since 2007 and highly, highly recommend it.

You can have separate vaults, so I have one for work, one for personal and one that my wife and I share. Works on Windows, Mac, iOS and Android. You can even have it work in the browser via Dropbox if you want.

Does it work on Windows 98?

[rainb1ood]

Keepass + Dropbox for me

[Photekq]

Lastpass!

[tigersharkdude]

password manager; a piece of paper you keep hidden near your computer desk

[Belfong]

1Password gets my vote. It's not free, but I've been a user since 2007 and highly, highly recommend it.

You can have separate vaults, so I have one for work, one for personal and one that my wife and I share. Works on Windows, Mac, iOS and Android. You can even have it work in the browser via Dropbox if you want.

I didn't know 1Password works in Windows. Do you have to pay for the Windows app as well? I find it appalling that one has to pay for the iOS and the Mac client. It looks great, sure, but why charge a few times when the alternative, such as KeePass is free!

Edit to say that I do appreciate paying for software but I just wonder how they would stay competitive by charging for every client app (iOS, Mac, Windows). I like LastPass model. Free to use but pay a yearly sub if you want it on a mobile device.

[riotonthebay]

1Password gets my vote. It's not free, but I've been a user since 2007 and highly, highly recommend it.

You can have separate vaults, so I have one for work, one for personal and one that my wife and I share. Works on Windows, Mac, iOS and Android. You can even have it work in the browser via Dropbox if you want.

I have the exact same setup. A personal one shared with my girlfriend and one for work that our whole team shares. Works great.

[dorkvader]

Does it work on Windows 98?

SHA_1 Pass does.

[JaydrVernanda]

i use keepass because it's open source and is free.

[paicrai]

password manager; a piece of paper you keep hidden near your computer desk

yep, that's about it

[Input Nirvana]

Couple products keep popping up, and a new one (Thanks Dorkvader!)

This is an important issue that everyone should take seriously. I know I am, I've been hacked

[mashby]

This is an important issue that everyone should take seriously. I know I am, I've been hacked

I agree 100%.

And just to plug 1Password again... I know it's not free, but it's the most integrated and easy-to-use solution I've found. On iOS devices, being able to use the built in browser to auto-login is fantastic. The fact that all of my passwords are the maximum allowed with the most complicated recipe the site will allowed is a non-issue.

As an added security measure, I enable two-factor authentication whenever possible. PayPal, Google, etc.

[Input Nirvana]

It seems to me that 2 step auth. is the way to go.

All passwords can be brute-forced eventually, and although I'm not going to spend hours reading about it, the concept is scary enough just knowing passwords aren't enough.

[mashby]

You're right. Strong passwords today will not necessarily be strong passwords in the future. One of the things I like about 1Password is that it allows you to do an audit of your passwords, and will alert you to vulnerability issues. It'll show you which passwords a weak, which are old, which are duplicates and which may require updating due to Heartbleed, etc.

Speaking of strong passwords, I always think of this comic when the topic comes up.

[keymaster]

I've used LastPass for years and I haven't looked back.

[dorkvader]

You're right. Strong passwords today will not necessarily be strong passwords in the future. One of the things I like about 1Password is that it allows you to do an audit of your passwords, and will alert you to vulnerability issues. It'll show you which passwords a weak, which are old, which are duplicates and which may require updating due to Heartbleed, etc.

Speaking of strong passwords, I always think of this comic when the topic comes up.

Show Image

That right there is why I like the SHA1 solution. I can produce passwords that meet the complexity for stupid websites that are easy enough for me to actually remember. And I can also keep around a huge amount of passwords for all the logins that I need without having to store them on a potentially insecure server somewhere int he cloud.

Anyway, I haven't switched over to something like that yet, but I suspect the better ones are the "more integrated" ones. for most people that'd be the solution I go to.

Another option is to use a yubikey or make a similar thing (like using an MCHCK). We had these at work for 2 factor and it was pretty sweet. (and easy to use).

[anowt]

encrypted spreadsheet. best. pwd. manager. ever.