• Hey Guest. Check out your NeoGAF Wrapped 2025 results here!

Do you use a password manager for your online accounts and profiles?

Status
Not open for further replies.
Ooooh, turns out if I right click in Chrome, I get an option to generate secure passwords. Awesome. Just what I was looking for!
 
Ooooh, turns out if I right click in Chrome, I get an option to generate secure passwords. Awesome. Just what I was looking for!

I use firefox and if you click on the "three dots" lastpass icon in a Password field then one of the icons in the red bar is "Generate" which will do the same. You can also right-click on the Password field and choose "LastPass -> Generate Secure Password" from the drop-down menu.
 
I use Dashlane but I don't know what happens if my hard drive dies or something. Are all of my passwords just going to be gone?
 
I always thought these password managers were dumb, what if they get hacked? I stored several copies of all my passwords in three locations only I know.
 
I use Dashlane but I don't know what happens if my hard drive dies or something. Are all of my passwords just going to be gone?

Might want to figure that out before it's too late :)

I always thought these password managers were dumb, what if they get hacked? I stored several copies of all my passwords in three locations only I know.

This question comes up multiple times in every thread, and it's answered multiple times in every thread, but the question always get's asked... so here's the deal with most online password managers (like LAstPass).

LastPass does not store your data. LastPass does not store your passwords, website URLs, or anything that you enter in. When you're on your computer, you enter in your data... passwords, URLs, whatever, and this gets encrypted locally on your computer. When you login to LastPass, your login is encrypted and creates a unique secure connection between your computer and LastPass' data centers. The encrypted data is uploaded to LastPass.

If LastPass is hacked tomorrow... or even if a Russian hacker gets hired unsuspectedly at LastPass, they don't have your data. They have a bunch of encrypted garbledegook, that can only be decrypted using your master password and your second factor of authentication assuming you use it (e.g., your finger print, Google Authenticator, SMS text message, etc). LastPass also does not store your master password.

Your data is encrypted on your computer and that encrypted data is sent to LastPass. The data can only be unencrypted on your computer (or other devices you've authorized) via your master password AND your 2-factor auth, assuming you use 2-factor auth (and you should). LastPass never receives real data.

https://lastpass.com/support.php?cmd=showfaq&id=6926

LastPass has a more technical summary of this.
 
I always thought these password managers were dumb, what if they get hacked? I stored several copies of all my passwords in three locations only I know.

We use Yubikeys for multifactor with Lastpass at work. I have to explain multifactor to every single new hire, I have seen so many glassy-eyed stares...
 
This is not the first time I'm hearing about those pass managers but this is the first time I'm really considering trying one, but I really don't understand how this works...

If I use it, it is of my understanding I will not be able to memorize my password from that point on, right? So if I don't have my phone with me or don't have internet, will I not be able to know my password?

Let's say I'm at someone's else place and want to login at my gmail, but my phone is dead, how should I proceed?
 
I don't want to pay for Lastpass, so I use KeePass with the DB file password locked in my online cloud which is behind two-factor auth.

Works perfectly fine since all I had to do was get a Keepass reader app for my Devices, and a Browser Addon that grabs the password one way from the storage location.
 
Yes. It's called a clipboard with an increasingly-garbled piece of graph paper with multiple crossed-out iterations and little doodles in the margins

The rewrites over spilled water stains add to the charm <3
 
By default it's text/email. But there are other methods too, including Google Authenticator. I think LastPass premium has like a dozen different methods.

Ok, how do you do this?
I click on multi-factor but there's no option for just standard text/email verification.

I think you're saying it's already on perhaps?
I only use it on 3 devices so that's probably why I never get the security check. Perhaps I did ages ago.
 
This is not the first time I'm hearing about those pass managers but this is the first time I'm really considering trying one, but I really don't understand how this works...

If I use it, it is of my understanding I will not be able to memorize my password from that point on, right? So if I don't have my phone with me or don't have internet, will I not be able to know my password?

Let's say I'm at someone's else place and want to login at my gmail, but my phone is dead, how should I proceed?

Last Pass has an app that can be downloaded and used anywhere (though you must buy the premium version if you want to use it on a mobile device). You simply download Last Pass wherever you want it and log in to access your password.

The only password you really need to remember is the Last Pass master password that you use to log in to Last Pass itself. You don't need to worry about any others. Still, I tend to keep all passwords on a word document in a secure location in the off chance Last Pass is down when I need it.

I don't want to pay for Lastpass, so I use KeePass with the DB file password locked in my online cloud which is behind two-factor auth.

Works perfectly fine since all I had to do was get a Keepass reader app for my Devices, and a Browser Addon that grabs the password one way from the storage location.

Technically, you only need to pay for Last Pass premium and that's only if you want to use Last Pass on a mobile device.

Ok, how do you do this?
I click on multi-factor but there's no option for just standard text/email verification.

I think you're saying it's already on perhaps?
I only use it on 3 devices so that's probably why I never get the security check. Perhaps I did ages ago.

I'm not sure what you are asking... Are you asking how to enable multi-factor authorization for last pass? It's sign in to Last Pass -> open My LastPass Vault -> Account Settings -> Multi-factor options -> enable the one you want.

I can't remember the text/email thing as the default, but it's been awhile since I enabled multi-factor (I started off with the grid and then changed it to Google Authenticator).
 
Guys, a simple piece of paper is the safest, best way to store passwords.

Paper can't be hacked.

The only problem would be fire, but if you keep the paper inside a safe or something it will probably survive even that.
 
Was using Roboform for probably 20+ years. Had two licenses for my laptop and desktop.

Now that I have multiple laptops and desktops, and don't have any interest in paying for individual licenses, I tried out Keepass and I freaking love it. I've been syncing my DB on Dropbox (like I did with Roboform) and have all my passwords synced to all my devices. Even have a keepass variant on Android.
 
Technically, you only need to pay for Last Pass premium and that's only if you want to use Last Pass on a mobile device.

Yeah, but if you are constantly switching between devices; without Premium, Last Pass is essentially useless. Hence why if you have any technical knowhow, its easier and cheaper to just role your own solution
 
With the LastPass app you still have all of your passwords on mobile devices, tablets, etc. And it auto-fills if you want it to (I have it turned off on auto-filling oin mobile because it doesn't always work, I copy and paste instead). The "sync" will sync those passwords to the device, but I don't use that feature... Because the app works just fine for copy and pasting or doing auto-fill if you use that.

The wording of the mobile/tablet sync is misleading. Without premium you still get all of your passwords on your mobile device using the LastPass app (or going through the website, but the app is much better), and you can still use any password in a desktop application you just copy and paste it instead. But it takes no time at all. you can even use LastPass on your Xbox or PS4 using the browser if you wanted to.
Right so I just tried the mobile app and it's pretty explicitly telling me Lastpass free is only for desktops: I cannot use the the app for free.
 
1Password and two factor authentication enabled everywhere that supports it.

Be prepared to get annoyed at websites that have dumb password rules that deem your 32-digit password in acceptabele die to length or repeating characters, or because they don't support punctuation marks like it's 1999.
 
Yeah, but if you are constantly switching between devices; without Premium, Last Pass is essentially useless. Hence why if you have any technical knowhow, its easier and cheaper to just role your own solution
Since I mentioned earlier, if anyone wants a Keepass solution, here is what I use. It gives me most of the functionality of Lastpass, with a couple small workarounds for some things

Keepass (The Manager) - http://keepass.info/
Password protect the Database file with a Master Key and Store the Database file on your OneDrive/Dropbox/GoogleDrive, preferably within a Private folder. If you can, also set Two Factor Authentication up on your storage service. Just set it up so that it minimizes and closes to your System Tray and opens at system startup and you can leave it alone and forget you have it.

Chrome Extension - ExtensionCKP - KeePass integration for Chrome
I personally use this one because I like it's simplicity. Just login to your Online Storage and tell it where the Database is located at. Though it doesn't have the ability to generate a password and store it back into the Database file, so you will need to manually copy passwords back to Keepass, or Generate new passwords automatically within Keepass. There are other add ons though that you can check out though like "KeePassX"

Firefox Extension - Keefox
On firefox I use this one. It doesn't support Online Storage, so just point it to the database file located on your hard drive. Though since it has direct access to your database file, It can generate passwords, save to your database, get your files and in general it offers the full feature set of the Keepass program since its a more direct integration. It does require that Keepass always be opened.

For Mobile Apps, really just search for "KeePass" and try out a few until you find one you like, or just download the above extensions on your Mobile Browser. I personally have a Windows Phone so I use 7Pass; though I heard KeePassDroid is good for a generalized Android app.
 
Right so I just tried the mobile app and it's pretty explicitly telling me Lastpass free is only for desktops: I cannot use the the app for free.

Yeah, I let it expire because of what Albatross said but nope, you need premium.

Worth it though. Have used it for years.
 
Status
Not open for further replies.
Top Bottom