Page 1 of 6 123 ... LastLast
Results 1 to 10 of 53

Thread: Are Password Managers Really Worth It?

  1. #1
    Join Date
    Nov 2011
    Beans
    1,347
    Distro
    Ubuntu Development Release

    Are Password Managers Really Worth It?

    Given the current spate of password thefts, I'm wondering, again, if I should use a password manager.

    I'm curious about opinions about them. Are they really secure? Every one I've looked at relies on a master password. That becomes your most important password, but it is also the only password you can't manage with the password manager. If that's compromised along with any device running your password manager, you are in trouble.

    I'm also wondering about consistent use on multiple platforms. I use a Linux desktop, a Macbook, an iPhone, and an iPad. If I commit to a password manager, I want one that's available for all those devices and one that does not make me responsible for porting data from device to device. In other words, I want to set things up on one machine and have all my passwords available on all the other devices.

    Finally, I've tried a couple of password managers in the past. I quit them because they became a hassle to use. E.g., entering the password in the wrong field.

    So, what say you all? If you use a password manager, which onto and why? I

  2. #2
    Join Date
    Jun 2011
    Beans
    Hidden!

    Re: Are Password Managers Really Worth It?

    I have a text file with all my passwords & other sensitive info in it. I have a button on my panel that invokes a script as root (using gksudo), which decrypts the text file & opens it in a text editor. When I'm done reading & potentially editing it, it re-encrypts it.

  3. #3
    Join Date
    Dec 2010
    Beans
    Hidden!

    Re: Are Password Managers Really Worth It?

    KeepassX and on Windows Keepass 1.x ... really needed as I have used it to create random passwords as complex as allowed for each and every log in I need to do into any service.

    It has a fairly long pass phrase and also needs an additional file to unlock... I feel secure.



    404
    404

    Come shoot the breeze with us on the Ubuntu Forums IRC channel - #ubuntuforums

  4. #4
    Join Date
    Jul 2011
    Location
    /Europe/Netherlands
    Beans
    382
    Distro
    Kubuntu 14.04 Trusty Tahr

    Re: Are Password Managers Really Worth It?

    I use KeePassX. I have too many different accounts and definitely don't want the same weak (relatively short) password anywhere. As we all know from XKCD, special characters don't matter, passwords just need to be long. The easiest is just to let KeePass or another tool generate a random long string for you. KeePassX is also quite nice to operate, just click on the entry and CTRL+C to copy the password (it will only stay on the clipboard for a short time).

    If you use multiple platforms maybe you should look at LastPass to manage your passwords through a web interface (of course usable on all platforms you mention). KeePassX (Linux, and also Mac AFAIK) and KeePass (Windows) are also compatible as long as you use the .kdb database format (KPX can't reed KP's kdb2 format).
    "I believe humans get a lot done, not because we're smart, but because we have thumbs so we can make coffee." --Flash Rosenberg
    formerly 'known' as Euroman

  5. #5
    Join Date
    Aug 2005
    Location
    Adelaide, SA, Australia
    Beans
    549
    Distro
    Ubuntu 13.10 Saucy Salamander

    Re: Are Password Managers Really Worth It?

    Yes, they are. Just make sure the unlock password is nice and long. It means you can have randomly generated long passwords without having to remember them.
    Now we just need to make sure all financial institutions and the like allow for long complex passwords and we are set. Some government sites in Australia don't allow for passwords longer than 8 characters. INSANITY.

  6. #6
    Join Date
    Oct 2009
    Beans
    Hidden!
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: Are Password Managers Really Worth It?

    Quote Originally Posted by madverb View Post
    Yes, they are. Just make sure the unlock password is nice and long. It means you can have randomly generated long passwords without having to remember them.
    Now we just need to make sure all financial institutions and the like allow for long complex passwords and we are set. Some government sites in Australia don't allow for passwords longer than 8 characters. INSANITY.
    +1. I have a few sites that can only take 8 character passwords with no special characters. It makes me sad. =/

    I use KeePass, myself and it has worked well for me - I have it on a USB stick.
    Come to #ubuntuforums! We have cookies! | Basic Ubuntu Security Guide

    Tomorrow's an illusion and yesterday's a dream, today is a solution...

  7. #7
    Join Date
    Mar 2008
    Location
    Liverpool, United Kingdom
    Beans
    1,663
    Distro
    Ubuntu 14.04 Trusty Tahr

    Wink Re: Are Password Managers Really Worth It?

    Why not manage your passwords, create a list of Sites and associated passwords and have it on a flash drive.

    I would suggest using a password generator when creating new passwords & making the passwords over twelve characters long



    It's your stuff, you're in control of it so it's your job to make it the most secure it can be.

  8. #8
    Join Date
    Jan 2011
    Location
    Kansas City, KS
    Beans
    1,274
    Distro
    Ubuntu 13.10 Saucy Salamander

    Re: Are Password Managers Really Worth It?

    Quote Originally Posted by CharlesA
    +1. I have a few sites that can only take 8 character passwords with no special characters. It makes me sad. =/
    I ran into this lately with my school login. I was similarly disappointed.

  9. #9
    Join Date
    Oct 2009
    Beans
    Hidden!
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: Are Password Managers Really Worth It?

    Quote Originally Posted by Copper Bezel View Post
    I ran into this lately with my school login. I was similarly disappointed.
    I don't understand what is so hard about adding a special character to a password. I guess it has something to do with the backend database or something.

    I don't know for sure, so take that with a kilo of salt.
    Come to #ubuntuforums! We have cookies! | Basic Ubuntu Security Guide

    Tomorrow's an illusion and yesterday's a dream, today is a solution...

  10. #10
    Join Date
    Aug 2007
    Location
    Tokyo
    Beans
    178

    Re: Are Password Managers Really Worth It?

    Quote Originally Posted by CharlesA View Post
    take that with a kilo of salt.
    Can you call linkedin and repeat that line? Sorry, couldn't resist.

    On topic, I also like password managers. Same as notfound. I have a bunch of really long passwords for different sites and need a password manager to remember them. An encrypted text file would work just as well I guess.
    Full time open source software developer. Projects:
    Wakame-vdc: Virtual data center. Community: Wakame Users Group
    OpenVNet: Virtual networking using OpenFlow
    Sinatra-browse: Parameter declaration framework and browsable API for ruby Sinatra.

Page 1 of 6 123 ... LastLast

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •