|
Post by freddiemercurystwin on Aug 5, 2024 19:18:06 GMT
So currently I use the Password Safe Pro App on android as a means of storing all of my passwords, it works just fine, very easy and intuitive/simple to use but I wonder if there is a better (more secure) app I could be using, I'm not bothered about paying a one-off fee, just as I did for this one. Any insights/thoughts?
|
|
|
Post by brokenkey on Aug 5, 2024 19:21:43 GMT
I use Keepass. What more security are you looking for?
|
|
cubby
Full Member
doesn't get subtext
Posts: 6,403
|
Post by cubby on Aug 5, 2024 19:24:26 GMT
Bitwarden is seen as the best one now, I moved from Keepass to that a couple of years back and have no regrets.
|
|
rftp
New Member
Posts: 769
|
Post by rftp on Aug 5, 2024 19:25:14 GMT
1Password or Bitwarden.
|
|
sport✅
Junior Member
notice me senpai
I want to claim my tits
Posts: 2,326
|
Post by sport✅ on Aug 5, 2024 19:42:12 GMT
Seriously, what's wrong with hunter2?
|
|
|
Post by uiruki on Aug 5, 2024 20:14:51 GMT
If you're happy paying, 1password is good, and I use it across Mac, Windows and Linux as well as on my phone. If you are happy to host yourself, Keepass is powerful, open and portable.
|
|
|
Post by Chopsen on Aug 5, 2024 20:15:40 GMT
Bitwarden is seen as the best one now, I moved from Keepass to that a couple of years back and have no regrets. What makes bitwarden better?
|
|
askew
Full Member
Posts: 6,831
|
Post by askew on Aug 5, 2024 21:04:19 GMT
Seriously, what's wrong with hunter2? Huh, I just see that as *******
|
|
Tomo
Junior Member
Posts: 3,542
|
Post by Tomo on Aug 5, 2024 23:49:16 GMT
Bitwarden rocks. Totally free.
|
|
zagibu
Junior Member
Posts: 1,968
|
Post by zagibu on Aug 6, 2024 0:33:26 GMT
I use the service hash + long static password method of password memory systems. Basically remember 1 long password (> 12 chars) and inject it somewhere with 2 or 3 letters from the service/software you use it for. E.g. fontgeek password could be knocker1fg2bickers, then bank of scotland would be knocker1bos2bickers etc. How you define service hash is up to you, can use first n letters or abbreviation like in example or last n letters in reverse or whatever.
With this system I can remember all my passwords and still have different passwords for when one gets brute forced or leaked somehow. Can occasionally lead to the same password being used on multiple sites if the service hash is the same, for example if you use abbreviation-style hash fg for fontgeek then funkguru password would probably be the same. But I think in practice, it happens quite rarely.
What sometimes happens is that you use the wrong service hash. Did you use bos for bank of scotland or bs? But it usually only leads to 1 - 2 failed attempts, which isn't a problem.
|
|
|
Post by 😎 on Aug 6, 2024 1:42:50 GMT
This is all getting a bit mal’s sandwich
|
|
|
Post by Nanocrystal on Aug 6, 2024 1:54:28 GMT
zagibu That's what I do too but it never struck me as particularly safe as it might make it easy to guess your passwords for other sites? Then again, using a password app that puts all your eggs in one digital basket never struck me as a great idea either.
|
|
|
Post by Bill in the rain on Aug 6, 2024 5:20:30 GMT
I use keepass, then synced through onedrive/google (I forget which), though it can be a bit fiddly on mobile. Been using it for years though so if it aint broke...
|
|
|
Post by elstoof on Aug 6, 2024 5:24:39 GMT
I write all my passwords down on paper, which I then safely store inside an elaborate Himitsu-Bako box
|
|
|
Post by Bill in the rain on Aug 6, 2024 5:27:13 GMT
|
|
Lizard
Junior Member
I love ploughmans
Posts: 4,494
|
Post by Lizard on Aug 6, 2024 5:36:57 GMT
I use FGers usernames.
|
|
|
Post by Vandelay on Aug 6, 2024 7:30:53 GMT
Keepass here, with the file shared with my phone through Dropbox. Works pretty well, particularly on the phone. Only slight annoyance is no plugin for Chrome, but not a huge deal.
|
|
|
Post by Bill in the rain on Aug 6, 2024 8:10:03 GMT
Keepass works on mobile, but it's a bit of a pain swapping back and forward and copy/pasting the usernames/passwords. It's kinda pushed me to use the built-in Chrome password manager for unimportant stuff.
I wish Keepass had 2fa built in. There may be another variant of it that does, not sure.
|
|
mcmonkeyplc
Junior Member
General Martok Qapla!
Posts: 3,094
|
Post by mcmonkeyplc on Aug 6, 2024 8:27:55 GMT
I just forget passwords constantly and reset them all the time. Should actually start using one of these apps I guess.
|
|
|
Post by Bill in the rain on Aug 6, 2024 8:33:46 GMT
Lots of things have changed to one-time-passwords anyway.. so it's basically like forgetting and reseting each time ;-)
|
|
zagibu
Junior Member
Posts: 1,968
|
Post by zagibu on Aug 6, 2024 9:19:52 GMT
zagibu That's what I do too but it never struck me as particularly safe as it might make it easy to guess your passwords for other sites? Then again, using a password app that puts all your eggs in one digital basket never struck me as a great idea either. Yeah, if someone is able to intercept two of my passwords to two different services in cleartext, and takes the time to look at them, they can then guess all my other passwords.
But if you're worried about this, you can always remember two or three static passwords and assign them to services based on importance, for example use one only for essential services like ebanking, taxes, etc., another for important other things and a third for everything else.
It's not any harder to remember three long passwords than it is to remember one. But it's too hard to remember 50 different ones, especially if you don't use some for years.
The reason why I don't like utilities that manage my passwords is because in the past I have often been in situations with no access to said utilities.
|
|
Gruf
Junior Member
Even more taciturn than my name suggests
Posts: 1,615
|
Post by Gruf on Aug 6, 2024 10:24:52 GMT
I use Bitwarden myself on desktop and android, thoroughly recommended.
|
|