Password Managers

Adebisi

Adebisi

Clump of Cells
<Silver Donator>
27,899
30,684
There's a Password Manager thread buried deep in Product Reviews, but I think it might thrive better here.

What's good? Now that I've got three computers for myself and two kids, I'll have to manage all those logins for shit like Steam, Minecraft, Blizzard Launcher, etc.

PC and Android preferred.
 
  • 1Like
Reactions: 1 user
Funkor

Funkor

Molten Core Raider
733
618
I use Keepass personally. Has a PC version that you can either install or run entirely off a USB drive you carry around, and the Android app I use is Keepass2Android which has cloud hosting stuff set up on it to sync your key file over all devices. To remove cloud hosting as an attack vector where someone could steal your keyfile you can use an app/program like Syncthing on every device that runs at startup and keeps the keyfile synchronized without involving Dropbox or whatever.
 
  • 2Solidarity
Reactions: 1 users
lurkingdirk

lurkingdirk

AssHat Taint
<Medals Crew>
50,740
245,273
LastPass seems pretty great to me. I use it over a lot of different computers, from mac to pc, and it's always great.
 
  • 2Like
Reactions: 1 users
Deathwing

Deathwing

<Bronze Donator>
17,184
8,195
I use Keepass. The database uses billions of mathematical transformations so that it takes ~10s for a modern CPU to open the database. This is to mitigate brute forcing in case someone gets your database. Hopefully, you'll know your database is compromised before they brute force it. The database requires an english sentence that's easy to remember but also mitigates brute forcing. It also requires a key file that has to be manually added to each device that wants to access the database. The key file lives on a USB stick in a safe. Lastly, for convenience, the database lives on my Google Drive.
 
  • 2Solidarity
Reactions: 1 users
Pyksel

Pyksel

Rasterizing . . .
840
284
+1 for LastPass. I've tried Keepass and others but in the end my wife has to use it too and LastPass is very user-friendly.
 
Captain Suave

Captain Suave

Caesar si viveret, ad remum dareris.
5,677
9,744
Funkor said:
I use Keepass personally. Has a PC version that you can either install or run entirely off a USB drive you carry around, and the Android app I use is Keepass2Android which has cloud hosting stuff set up on it to sync your key file over all devices. To remove cloud hosting as an attack vector where someone could steal your keyfile you can use an app/program like Syncthing on every device that runs at startup and keeps the keyfile synchronized without involving Dropbox or whatever.
Click to expand...

+1 for KeePass hosted on Google Drive. I'm not quite so worried about security as to invoke all the protections Deathwing lists, but they're there if you want them.

Sadly, also -1 for not wife-friendly.
 
  • 1Solidarity
Reactions: 1 user
Lanx

Lanx

<Prior Amod>
68,512
158,688
+1 lastpass, it's free unless you pay for the subscription for mobile? which i think is just the app? but you can just login to get your passwords anyway.
 
Denamian

Denamian

Night Janitor
<Nazi Janitors>
7,624
21,112
Captain Suave said:
+1 for KeePass hosted on Google Drive. I'm not quite so worried about security as to invoke all the protections Deathwing lists, but they're there if you want them.

Sadly, also -1 for not wife-friendly.
Click to expand...

Same here. It's not as user friendly as it could be, but KeePass gets the job done well enough for me.
 
  • 1Solidarity
Reactions: 1 user
Pyksel

Pyksel

Rasterizing . . .
840
284
One of the nice things about LastPass is the integration of it into the browser which functions on both the desktop & mobile client. This lets you easily enter in your credentials without having to open up the vault, copy/paste, etc. On the desktop you just select the watermarked icon in the credentials fields but on mobile you can tie it right into any type of biometrics you have.

I would imagine you could do something similar with Tusk + KeePass or Kee + KeePass, but it's just nice to have it consolidated in one tool.
 
Void

Void

BAU BAU
<Gold Donor>
10,090
12,218
Another vote for Keepass here. I use Dropbox to sync it across my devices. I'm not worried about someone at Dropbox figuring out how to crack my password, but as mentioned you can use other methods if you are.
 
  • 2Solidarity
Reactions: 1 users
Ronaan

Ronaan

Molten Core Raider
1,092
436
OK maybe I'm forgetting something but how is that lastpass thing different from Chrome giving me my login data across devices?
 
Ukerric

Ukerric

Bearded Ape
<Silver Donator>
8,494
10,705
Chrome does "trust our cloud with your passwords". Password managers don't; even if you use cloud-based syncs, you're syncing encrypted files. As long as your key/password is not on the cloud service, you can't have your password safe stolen. If you have:

1) Your passwords synced on the cloud
2) You can reset your password
3) You still have your passwords

Then Google has everything required to decrypt your passwords. Or a hacker who gets access to your base. Or the NSA. But usually all three.


As a CISO, I use exclusively keepass, because it's the only password manager certified by our national (french) cybersecurity agency. It is used internally (with an additional architecture) to keep all service accounts for every internal application/DB/system safe.
 
  • 1Solidarity
Reactions: 1 user
Ronaan

Ronaan

Molten Core Raider
1,092
436
Ukerric said:
Chrome does "trust our cloud with your passwords". Password managers don't; even if you use cloud-based syncs, you're syncing encrypted files. As long as your key/password is not on the cloud service, you can't have your password safe stolen. If you have:

1) Your passwords synced on the cloud
2) You can reset your password
3) You still have your passwords

Then Google has everything required to decrypt your passwords. Or a hacker who gets access to your base. Or the NSA. But usually all three.


As a CISO, I use exclusively keepass, because it's the only password manager certified by our national (french) cybersecurity agency. It is used internally (with an additional architecture) to keep all service accounts for every internal application/DB/system safe.
Click to expand...
Alright that makes sense. Thanks.
 
Lanx

Lanx

<Prior Amod>
68,512
158,688
Ronaan said:
OK maybe I'm forgetting something but how is that lastpass thing different from Chrome giving me my login data across devices?
Click to expand...
you shouldn't rely on chrome for that, for instance i work w/ companies that still default to only IE for corporate stuff.
 
You must log in or register to reply here.