Printable View
The ebay intrusion(and other intrusions) got me thinking about a good topic for discussion.
How do you manage your passwords?
Personally, I use and advanced software that manages and generates them all for me. I always max out character generation, alpha-numeric and special characters included where possible.
I only really need to remember one or two.
You?
I'm that guy that has a spreadsheet with the name of the forum/website and the login and password. As time goes on I develop interests in other areas and find yet more websites/forums that require a login. It's nice to keep track of the old ones as you never know when you want to pop back and dig around a little.
Of course if someone with bad intent got hold of my spreadsheet, I would be pretty hosed :(
Well, what about fire, flooding, natural disaster of choice, etc. Yikes.Quote:
Originally Posted by MattCB
I usually just change my old password back to my same old password. I'm good for a couple more years before the next major fabricated scare/distraction. Been doing this for the last 20 years and nothing has ever happened. ymmv
I wonder how many people are putting off replying to this thread, because their answer is something along the lines of "Change my password, why would I want to do that? Just another thing to remember!" ?
I tend to use a password-generator. all my machines sync them in an application called 1password. invaluable and very very safe. They are changed across all my login sites about every 3 months or so
For passwords I don't have committed to memory for sites I don't frequent too often I have them written down and stored in a safe, not like SWMBO who has hers written on post-it notes throughout the house.:(
Crazy world out there,Suppose I should not be putting my PIN # on the back of my ATM card with a sharpie:)
You mean you can put something other than your birthday?
:rofl2: definitely not, plus when using a debit card it is wiser to use it as a credit vs. debit, especially if you use it to gas up your car.Quote:
Originally Posted by pixelfixed
I made it easy on myself. I just use SRPHAD33 as my password for everything. ............. :chapeau
I use the same 5 passwords for everything with the exception of my bank. I know its not the best practice but it doesn't matter how clever you are with passwords if the likes of eBay get hacked they are going to get them anyway if they really want them ;)
I'm with Birnando and Siguy...I use an application called Dashlane that generates strong passwords and stores them for you in an encrypted site. If they're ever hacked or I forget my master password, I'm toast.
I only have to remember 1 password, the 1 for my spreadsheet LOLQuote:
Originally Posted by MattCB
yeh I'm a spreadsheet guy too with 59 online access logins that need passwords etc
I have about a dozen just for work that are all different & some that change every 60 days, then the rest are online banking, & forums & everything as some want only 6 letters some must have at least 7 with numbers & symbols & case sensitive etc
& my mind is to busy faceturbating to remember passwords LOL
Well, that password and my psycho-mechanical password detection software and I just got your entire financial info and now own your bank accounts. lets see which razor did I want to buy.";"Quote:
Originally Posted by JimmyHAD
Actually I use the same password for everything but it's so extreme and simple no one would ever be able to guess it.
I promptly forget it and have to change it every time I sign on.
I use Last Pass (lastpass.com). A web "guru" guy turned me on to it a while back. Its free for all but mobile devices ($12/yr if you want to automatically sync those to your account). It generates unique passwords and stores them along with the websites in encrypted storage. They also show you how to add additional security protocols like verification matrices to that to make things all but impossible to hack.
Like Birnando, I use the app "1Password." Used it for years now, very happy with it. It integrates smoothly w/ web browsers and will even auto-fill personal/work info and credit card info.
I will have to look at that "1password". I have a journal in one of my safes that has my current passwords. I learned that I need to keep a page for each account. My memory is too short to remember such complex & random sequences. Close your eyes and randomly single finger peck the keyboard in MSWord or another word processing program, shifting whenever you see fit.
It died and I have yet to replace it but I found a finger print reader that was real handy. It did everything the software types do but I had to think about nothing buy putting my finger on the pad when it came time.
Ditto here too. Great product. If I had to pay for one mobile app, it'd be LastPass. Hands down. I don't have to worry about local browser insecurity, loosing phone, etc...Quote:
Originally Posted by Splashone
I, too, use the multi-level grid authentication you mention, so even if your master and sub-master passes are hacked, they would need to be in physical possession of an additional authentication method.
I've got my grandfather and other family members using it as well. Their days of pathetic passwords are over... well, I'd like to think so.
I haven't used 1Password. I'll have to take a look.
EDIT: Woah! 1Password $39.99 for single user license. pretty restricted "free options" too. I do like the PBKDF2 and hope LastPass will move this way also. No USB thumbdrive method or multi-factor authentication. No virtual keyboard for anything other than Windows and not in Chrome. No one time password(haven't seen that yet)??
I'm looking here btw LastPass vs. 1Password: Password Manager Shootout [Windows/Mac] | 40Tech
Also, as to 1Password, I don't really like the idea of a standalone sitting around on computers. I would think it would be susceptible to reverse engineering and, hence, a serious security liability. A large part of the rational for me was to have local computers in no way in touch with my credentials.
There is a an open source alternative as well: KeePass
Now, here's the rub: Did you complete the initial setup with tape on or tape off?
I generate passwords using my own software and just memorise them. Some of the less important I keep in a password manager called Roboform, but important ones like internet banking etc are in my head.
I try to use paypal as often as I can for online purchasing but when I cannot I do use my credit card. My bank has decent fraud detection, but...
At work they have the little plastic keychain thing that generates numbers every x seconds or whatever it is.
I've got an old laptop I've installed a linux OS on that is completely stand-alone - connects to nothing, uses unrelated password. I use that when students want to "show me their work" on a USB stick. If they want to download a key logger (or anything else) onto my machine they are most welcome to. (we've had hacking incidents in the past).
James.
Password practices? Every day or I will forget them. :p
I use the same one for a hand full of forums and change them out every few months,
same with my web based email.
Banking good luck, they don't make sense to me and are changed almost as often as my socks! (waiting on the peanut gallery here)
Have a book with them in. It ok if I remember note the chg.... and if I could remember where I put the book[emoji33]
I have one for several insignificant sites.
The important ones are written and tucked away, but I'll be getting password managing app.
Some of the important ones I remember, and all main financial sites I use are protected with pin activation via phone message.
True that - I forgot about the text message authentication.
James.
A USB thumb drive for the passwords and it is nowhere near the computer if I am not. A spare up to date at a different spot at home.
And some hefty AV and optimizing programs also on the computer full time. May not be perfect but..it may help.
~Richard