Storing passwords

How about 1password? Has biometrics (login using the Touch ID) and a nice interface/workflow for generating strong passwords on the fly. Also has the ability to share an encrypted file to Dropbox or iCloud so all your devices can access the same password repository.

Only downside is that it's bloody expensive to get the same app on the iMac compared to a few quid for an iDevice. Shame about that.
 
They ask for that because users use insecure passwords. "123456" is not a good password, nor is "password" or "jamesrobinson69." The sites that p*** me off are the ones that limit password character count to 12 or 14. 16 is alright though, but I love the sites that allow you to have 50-char pass or more. Those are the best.

I use simple to remember passwords which I then put through a SHA256 generator giving me a 64 bit hash which I then use for my passwords - different for every site.

As you say I also think that all sites should offer at least a long password count and 2 factor authentication.

My bank has at least some good practices with 4 checks on authentication and I also have to put in a one time code which is sent to my mobile if I (or anyone) tries to get money out - like a BT.

May not be as convenient but definitely more secure.
.
 
Don't let browsers store your passwords.
I've a set of freely available utilities for extracting them. Not that I've ever used them, but they are included with a suite of apps which go everywhere with me.

I'm not entirely trusting of LastPass. The mobile app can be manipulated on stolen phones to give a cracker infinite guesses at the 4 digit pin code used to secure the password database.

I use KeePass with the password database stored on my server. If I need my passwords on the move, I have to connect to the home network via VPN. Sure, it's not as convenient but I feel it's much more secure.
 
Back
Top