Password managment and security
 

Just wondering how you all manage your many passwords and many accounts...?

This has recently become a problem for me as I have multiple poker accounts, multiple email accounts, neteller, firepay, online checking, personal websites (e*trade, ingdirect, ect), internet forums, blogrings, and a few other things.

With all these different usernames and passwords it is easy to lose track of which is which and what goes where.

I have read about a few products and some software that is sub-par to help keep track of all this. However, nothing very exceptional or great.

Can anyone make some good recomendations as to how you manage it all?

Looking for something safe and secure, and hopefully something that is portable.

Another question is how do you all go about picking your passwords? Do you pick the easy to remember password (address, last name, ect.) or something completly random? Do you have the same PW for all your accounts? Or do you mix it up?

And finally, Can anyone reccomend a password generator, or something that they use to create random passwords.

Thanks.

Re: Password managment and security
 

there are "safe" (as in a bank safe) type programs that allow you to have incredibly long/secure/different passwords for everything and all are stored with one master password, being easily recalled when needed.

If you don't use it, try to have your passwords mix and match numbers/letters.

Re: Password managment and security
 

I use KeePass (open source) and really like it. I use a USB "thumb" drive plus a strong pass-phrase to unlock my password file. It has a decent password generator built in that I have used to create all my passwords.

Before that I used PasswordSafe but I have not followed the development of that project.

Re: Password managment and security
 

I have also ran into that problem and I have decided to give roboform a try. The reviews I've seen have all been positive and it seems to possess many of the features you desire.

Re: Password managment and security
 

I use a combination of KeePass and Roboform to manage my passwords. Roboform is great for web based passwords. KeePass comes in handy for those other passwords that might not be fillable via a web form (Poker programs). Both have good random password generators.

Re: Password managment and security
 

It's very important to not use the same password on multiple accounts. My brother recently had his web based email account compromised (Yahoo). He had emails in there giving his Paypal and Ebay account details. Because he was using the same password as on his Yahoo email, they managed to purchase about $1000 worth of stuff before he noticed.

So if you use web based email, you should also make sure that you delete any emails containing account info. For instance, Neteller send you and email containing your Secure ID.

Passwords should be long (at least 8 characters, preferably 12), and should be a random mix of punctuation, upper and lower case letters and numbers. Never use names, words, or personal info (ie date of birth). You should change passwords on sensitive accounts at least every six months, or more often if you can.

Another useful thing to do is buy a shredder (one that cross cuts ideally). They're not too expensive. Any receipts/letters (utility bills etc) that you're going to throw out should be shredded beforehand. Receipts sometimes contain your entire credit card number, and any personal info could be used by identity thieves.

Also, make sure to regularly check all your online bank accounts for any suspicious activity. I recently went through my online bank statement and found several (though small) transactions that I'd never authorised.

Re: Password managment and security
 

I use PasswordSafe which I like, I had previously used Roboform which I didn't like.

Re: Password managment and security
 

I use several sheets of paper in a notebook next to my computer. Anything I would want to use on a differnt computer I have memorized.

Re: Password managment and security
 

[ QUOTE ]
I use several sheets of paper in a notebook next to my computer. Anything I would want to use on a differnt computer I have memorized.

[/ QUOTE ]


I have a small hardbound notebook I keep in the desk drawer. I'm always afraid if something happened to the computers or my husband who handles most things on the computers I'd be totally lost so we agreed on the notebook. I don't like all my eggs in one basket [img]/images/graemlins/smirk.gif[/img]

S&SGW

Re: Password managment and security
 

i keep most in my head but also on paper- in a secret safe.
too paranoid to have someone elses program hold it for me just in case...

Re: Password managment and security
 

"And finally, Can anyone reccomend a password generator, or something that they use to create random passwords. "

I'm sorry but this shows a lack of imagination on a scale I've rarely see before.

Re: Password managment and security
 

"I don't like all my eggs in one basket "

I have so many computers and accounts there is no way to reconstruct the information if a fire were to occur. I store all account and PW info off site as well.

Re: Password managment and security
 

[ QUOTE ]
"I don't like all my eggs in one basket "

I have so many computers and accounts there is no way to reconstruct the information if a fire were to occur. I store all account and PW info off site as well.

[/ QUOTE ]

I have so little money left anywhere that I have lost the fear - My password on all sites is now "rigged" - feel free to get in all my accounts and play all you want.

Re: Password managment and security
 

[ QUOTE ]
I store all account and PW info off site as well.

[/ QUOTE ]

I've kept my passwords in a text file for ages now, and I do realise that is absurdly insecure. I've always felt somewhat protected because I know a bit about internet security, am behind a hardware firewall, along with various other protection methods. On the other hand the fact that I do know a bit about security makes me keeping my passwords in a text file even more absurd.

However I have become increasingly paranoid about this and am now at the stage of doing something about it. I'm going to use password safe on my computer, but the question remains, how do you secure the paper copies you keep for backup?! I just can't come up with a total solution which doesn't have a fatal weakness somewhere in the security chain...

So passwords on your computers locked up in something like password safe, then backup passwords on paper locked in a safe? What if your house burns down? Another safe at parents/trusted friends house?

Yes I am becoming paranoid.

Re: Password managment and security
 

Why not just burn a cd with the .dat file from PasswordSafe and bring it to work?

Re: Password managment and security
 

That's a good simple idea, cheers. Of course I can't help taking my paranoia further and worrying about getting amnesia and forgetting the passcode for PasswordSafe. I am aware that this is an absurd worry, made even more ironic since I'm the guy with a load of passwords in a text file.

Re: Password managment and security
 

I keep my passwords and usernames in seperate files and use mnemonic device, instead of the passwords themselves, to list the passwords. I also keep a handwritten sheet in my safe.

Re: Password managment and security
 

[ QUOTE ]
I keep my passwords and usernames in seperate files and use mnemonic device

[/ QUOTE ]

I like the mnemonic device idea, thanks for that.

Re: Password managment and security
 

I have them written down on a piece of paper in my desk next to my computer. I'm not much afraid of someone stealing it.

Re: Password managment and security
 

Password Safe running off a USB key. It goes where I go. Password Safe can also generate very secure passwords on demand too.

Re: Password managment and security
 

Split your master password into multiple parts. Then give each part to friends of yours who don't hang out with each other. For example one part to your dad and one part to your best friend. Another benefit is that your family should be able to access things should something unexpected happen to you.

Re: Password managment and security
 

Why don't you just make up some passwords and remember them?

sQzbYsfTq3fs! can't you remember something like this?