How do you manage your passwords ?

FingeringFu · 2010-09-15 15:01:22

onearm wrote:

The dozen most used I just remember them; for the tons of others (openid didn't exist 10 years ago *sigh*), I have a small ssl encrypted text file that is written unencrypted when I need to the encrypted swap (so no traces are left in clear to the disk)

So SSL can encrypt files on the hard drive? It was my understanding that SSL was created for encrypting network traffic.

vacant · 2010-09-15 16:03:42

I keep my passwords in an "osmo" note.

However all my partitions except for /boot are LVM2 on top of a luks-encrypted hard drive partition, so I have to enter a nice long password to boot. I have encrypted backups.

rusty99 · 2010-09-15 16:15:48

FingeringFu wrote:

So SSL can encrypt files on the hard drive? It was my understanding that SSL was created for encrypting network traffic.

Examples,
http://www.madboa.com/geek/openssl/#encrypt-base64
http://www.madboa.com/geek/openssl/#encrypt-simple

FingeringFu · 2010-09-15 16:21:50

rusty99 wrote:

FingeringFu wrote:
So SSL can encrypt files on the hard drive? It was my understanding that SSL was created for encrypting network traffic.
Examples,
http://www.madboa.com/geek/openssl/#encrypt-base64
http://www.madboa.com/geek/openssl/#encrypt-simple

Interesting! Thanks for the information.

Bregol · 2010-09-15 16:25:28

i like to keep mine simple and easy to remember. Like "1234" or "password". And in case I forget them, I keep a cleartext list on pastebin.

(Disclaimer: do not try this at home. or anywhere. ever.)

muunleit · 2010-09-15 17:20:25

+1 for pwsafe

Texas · 2010-09-15 20:37:07

pokraka wrote:

All my passwords are just the name of the service I want to sign in mixed with a salt.

I also do something similar. All are uniqiue and strong.

SanskritFritz · 2010-09-16 07:28:01

Texas wrote:

pokraka wrote:
All my passwords are just the name of the service I want to sign in mixed with a salt.
I also do something similar. All are uniqiue and strong.

What do you guys do when you are forced to change your password every month?

ozzolo · 2010-09-16 07:55:12

I use fpm2 ( Figaro's Password Manager 2 ) with a little usefull "autohide" mod.

ijanos · 2010-09-16 08:04:21

KeePassX + keeping the database in my dropbox folder. I also recommend using keepassx's password generator, so you will have strong passwords and also be protected against attacks based on password reuse

dboat · 2010-09-16 08:30:34

I put them down on paper except a special string that I remember by heart.
All critical passwords embed that string somewhere in between.
People see this paper still have to figure out How to embed What into that visible part of password.

hatten · 2010-09-16 10:40:43

Cleartext file managed with bash scripts. Nobody in my neighbourhood can use my computer anyway.

pokraka · 2010-09-16 15:44:28

SanskritFritz wrote:

Texas wrote:
pokraka wrote:
All my passwords are just the name of the service I want to sign in mixed with a salt.
I also do something similar. All are uniqiue and strong.
What do you guys do when you are forced to change your password every month?

You could simply use a salt based on the name or the number of the month.

Texas · 2010-09-16 16:38:35

SanskritFritz wrote:

Texas wrote:
pokraka wrote:
All my passwords are just the name of the service I want to sign in mixed with a salt.
I also do something similar. All are uniqiue and strong.
What do you guys do when you are forced to change your password every month?

I only have one of those and I just increment the password by one each time: Password01, Password02, etc. I know some systems would not accept this as they have rules to prevent such things.

l'pc · 2010-09-17 19:52:10

For passwords that changes every month, my father has an simple tip : adding the month's number in the password (for example, password9 for September)

I also only have 2 passwords (root and all the rest)
I should change, but for the moment I don't have really confidential things...

rwd · 2010-09-20 20:56:18

I found typing in a series of passwords in pwsafe quite annoying with no 'undo' function. A typo means having to quit the app and edit the wrong entry. For all unimportant websites I use the Firefox password hasher extension https://addons.mozilla.org/firefox/addon/3282/. It creates new passwords based on a master password.

Last edited by rwd (2010-09-20 20:59:17)

bernarcher · 2010-09-21 11:17:46

rwd wrote:

I found typing in a series of passwords in pwsafe quite annoying with no 'undo' function. A typo means having to quit the app and edit the wrong entry. For all unimportant websites I use the Firefox password hasher extension https://addons.mozilla.org/firefox/addon/3282/. It creates new passwords based on a master password.

But this is the way it should work. Requiring a complete password protected edit for sensible information clearly is a nuisance but it adds to security. And it usually is a one-time operation only.

I wanted a stand-alone, system independent password manager which provides a fairly good password generator. Thus pwsafe is optimal for my needs. Do not depend on application bound addons for sensible information. You will most likely loose everything on major changes being it browser hopping or upgrades which break compatibility.

Shit most likely happens. I experienced such breakages multiple times in about 30 years pc usage.

Last edited by bernarcher (2010-09-21 11:18:46)

nomilieu · 2010-09-29 03:51:12

I just remember them.

I reuse a small group of passwords for assorted nonsensitive logins (e.g. forums), and I have a larger group of stronger passwords for more sensitive logins (roots, banking, etc.). I generally try to assign passwords by category, to lessen the amount of guessing in the event I forget a password.

I prefer passwords that are either short phrases with numbers added to them (simple) or entire sentences with random punctuation and nonsense characters added in (strong).

This method does have drawbacks. I recently forgot the password for my Windows (gaming) box, and I wasted a half an hour trying to remember what on earth it was. I eventually remembered it, fortunately (as I really wanted to play some games!).

jasonwryan · 2010-09-29 04:02:58

I have a single master password (14 chars, alphanumeric and special chars) that opens a truecrypt file.

In the TC file I have a list of all my accounts that require strong passwords and next to each account is a mnemonic - so if my password for that account was something like 'b0rd#rc0lli3' the mnemonic might be 'dog'.

Now, if I could only remember that master password...

cesura · 2010-09-29 04:20:56

fsckd wrote:

itsbrad212 wrote:
I only have 2 passwords to remember.
1) Root password
2) Everything else
Except they're both so strange that no one would be able to guess them.
So if I get you to register on my site, I have everything else?

I don't register for many sites. If for some reason I do sign up for an obscure site, I use a different password.

jocheem67 · 2010-09-29 06:48:13

There's a couple of workable passwd's I use for non-sensitive data ans sites. Sensitive stuff I keep in an ecryptfs encrypted folder.
I'm just learning/investigating a sensible methodology for security...there's still a lot of work to do, for example cleaning my 10 year old hotmail inbox with all passwd's from sites

AdulteratedJedi · 2010-09-29 08:05:04

Being a user of a mac, I have never found anything for managing passwords as good as 1Password. I have tried to make my process Like it though

My passwords are different depending on use;
- For machines I access physically I have a couple of passwords that are 15-25 in length and a mixture of numbers and characters. These are stored in Muscle memory.

- For websites and such passwords have been generated by the above software mostly, ranging from things like =MNH)x9]u8Q6n?@4w3qb to something like 26L9EtkcTijJRDbW74MQuwVCHXrofxFGpBAg8nvaP3deUKm

I have exported all my passwords to a file which is encrypted, I am proficient with vim as an editor, and have found that because of my workflow (Xmonad, chrome/uzbl, urxvt, vim) I can have a terminal popped up --> file unencrypted and opened in vim --> vim searched for the website and the password copied --> pasted into the site. In a flashhg 5-15 seconds maybe depending on my typing skills that day lol.

Saying that though I am going to work on a script that I can either call via dmenu or keyboard shortcuts, to automate all this. Much mimicking 1password but allowing me security and ease of use.

adamlau · 2010-09-30 05:33:51

In a KeePassX database within a TrueCrypt container.

maxexcloo · 2010-10-01 09:33:17

I use KeePassX to manage my passwords, they are laid out in the same directory structure as my Firefox Bookmarks.
I save the passwords in Firefox and encrypt them using the built in protection. I have a 12 character uppercase, lowercase and numerical password for every service I use.

Nebulosa · 2010-10-02 05:23:57

I use Seahorse to manage all my passwords. As I Gnome user, it's very convenient for me - epiphany, evolituion, empathy - they all use seahorse to store passwords. With symlink to encrypted file *.keyring in Dropbox I need just remember my master password at new comp.

For generate new passes I use this:
< /dev/urandom tr -dc "@#$%^&*()<>~?+_A-Z-a-z-0-9" | head -c25
Works perfectly in everywere

Last edited by Nebulosa (2010-10-02 05:26:31)

Arch Linux

#26 2010-09-15 15:01:22

Re: How do you manage your passwords ?

#27 2010-09-15 16:03:42

Re: How do you manage your passwords ?

#28 2010-09-15 16:15:48

Re: How do you manage your passwords ?

#29 2010-09-15 16:21:50

Re: How do you manage your passwords ?

#30 2010-09-15 16:25:28

Re: How do you manage your passwords ?

#31 2010-09-15 17:20:25

Re: How do you manage your passwords ?

#32 2010-09-15 20:37:07

Re: How do you manage your passwords ?

#33 2010-09-16 07:28:01

Re: How do you manage your passwords ?

#34 2010-09-16 07:55:12

Re: How do you manage your passwords ?

#35 2010-09-16 08:04:21

Re: How do you manage your passwords ?

#36 2010-09-16 08:30:34

Re: How do you manage your passwords ?

#37 2010-09-16 10:40:43

Re: How do you manage your passwords ?

#38 2010-09-16 15:44:28

Re: How do you manage your passwords ?

#39 2010-09-16 16:38:35

Re: How do you manage your passwords ?

#40 2010-09-17 19:52:10

Re: How do you manage your passwords ?

#41 2010-09-20 20:56:18

Re: How do you manage your passwords ?

#42 2010-09-21 11:17:46

Re: How do you manage your passwords ?

#43 2010-09-29 03:51:12

Re: How do you manage your passwords ?

#44 2010-09-29 04:02:58

Re: How do you manage your passwords ?

#45 2010-09-29 04:20:56

Re: How do you manage your passwords ?

#46 2010-09-29 06:48:13

Re: How do you manage your passwords ?

#47 2010-09-29 08:05:04

Re: How do you manage your passwords ?

#48 2010-09-30 05:33:51

Re: How do you manage your passwords ?

#49 2010-10-01 09:33:17

Re: How do you manage your passwords ?

#50 2010-10-02 05:23:57

Re: How do you manage your passwords ?

Board footer