Password manager recommendation

Jorgen Andersson

I use a post-it note under the keyboard.

Wrong is evil and must be defeated. - Jeff Ello Never stop dreaming - Freddie Kruger

Richard Deeming

Depending on where your computer is, and who else has physical access to it, that's probably more secure. :-D

"These people looked deep within my soul and assigned me a number based on the order in which I joined." - Homer

Jim Knopf jr

My combination is "KeePass" and "KeePass Touch" on iOS with automated data exchange via Dropbox. This combination comes with free apps and no additional cost. The encrypted file is ALWAYS at a safe place in the cloud. This way a change on one device is instantly copied to all other devices without having to take care. Using the password generator at nearly all times makes most of my passwords not memorable and hard to type and therefore secure. I started with KeePass on Windows a couple of years ago before the big wave of passwords hit us all. I started on Windows only. Later with manual exchange to my mobile. All this was not efficient enough to let me use it at all times. Only the automated data exchange made it attractive. Now it even holds bank account and passport numbers. It requires some attention to use it at ALL times, even for the simplest websites which are never intended to be reused. The initial work to get everything into the password manager is hard, but keeping it up to date is easy. Start using a password manager NOW and use it always.

CCostaT

DefinitelyKeePass for me as well. I particularly like the keyfile feature where you need your master password plus a key file/pen/whatever to unlock the database

Lost User

I wrote my own, using a binary file of my own format with encrypted content. It's not perfect but then I don't have anything worth stealing.

Stuart Dootson

[1Password](https://1password.com/). I've been using it for over a decade, since it was Mac-only. I now use it on iOS, macOS and Windows, and it's been bullet-proof for me. I use it to store & generate passwords (most of my passwords now are 20+ characters of (effectively) line-noise), generate timed one-time passwords (aka 2-factor auth), store payment details for easy filling in, as well as storing 'secure notes'. It *is* a subscription service, and *does* share passwords (encrypted, of course) in AgileBits's cloud, if those are deal-breakers to you.

Java, Basic, who cares - it's all a bunch of tree-hugging hippy cr*p

Maximilien

PIEBALDconsult wrote:

Roll your own.

AKA : Notepad++ :rolleyes:

I'd rather be phishing!

DumpsterJuice

LastPass.com I have been using this for years. It works across all your devices.(If you want it to) The Passwords are encrypted at rest, (and of course in transit) You can download all your data, if you want a local copy. They have a way to recover your data, should you be totally incapacitated. Take a look at it before you commit. Keep It Simple, keep it moving.

User 10088755

I have been using RoboForm for over 15 years and use it to manage over 700 unique login/passwords. It has both local and cloud management of your encrypted password files. While I only use it on multiple desktop and laptop computers, it also has a mobile device version for your phone. You can find it here: RoboForm: Manage your passwords with ease and security[^]

Member_14784974

I use a Rolodex. Yes, I trust the (inanimate) thing, and yet, I do keep it under lock and key. The entries are hand written ... so no printing effort, so no files of entries exist on any computer. The handwritten entries are not literal, and disproportionally filled with e's and i's. It is transportable in that is is reasonably compact. It travels well but is somewhat 'fragile'. It has no electronics, no batteries, no chargers, no software and no electronic connections.

Chris Maunder

1. Do you use them? Yes 2. Do you trust them? Not really, but about as much as anything else that's an option 3. Which one do you use? LastPass 4. Why? Because I used to use 1Password but ditched it for a number of reasons and settled on LastPass since it was free, seemed adequately secure, and worked on every one of my devices.

cheers Chris Maunder

rnbergren

1. yes and NO. Yes at work because shared. no for personal. 2. Yes and No. 3. Keepass. 4. someone else likes it. I personally use a three stage password depending upon the site. a.I have two passwords that are throw away completely. they are used in combination with a fakeish email and I don't care if people hack them. there are no credit cards or any hoenest real information tied to them. I never use my real birthday adddress etc. unless I absolutely have too. IE work forms. IRS etc... b. I have a password formula not unlike xkcd mentioned above. But enough different that I feel like a computer couldn't hack it easily and I can easily remember the password. I often record hints on what changed on these passwords in a text file on a local drive that is slightly encrypted. These are for sites like amazon, or other purchasing sites that have my credit card information. c. One password to rule them all. I have one master password which might change slightly overtime. This is only for banking(wife only knows it) and a second one for secure transfers to my wife and children. They know the password and it is not easy to remember but we seem to do ok with just this one. It is written down only on a piece of paper in an envelop just in case. That is my system. It works for me.

To err is human to really mess up you need a computer

kmoorevs

Like many others here, I wrote my own...so of course I trust it. For portability (laptop or desktop) and security I wanted to use a single-file database that could be password protected and originally used SQL CE, but recently switched it to Access as it's much easier to share with family/friends.

"Go forth into the source" - Neal Morse "Hope is contagious"

agolddog

Yes Yes KeePass I don't recall how I came across it any more, but it seems to fit my needs. Has an Android version. Allows me to can store the file in the cloud and access it anywhere, rather than having to sync devices. As I recall, the developer takes donations to pay for it. I'm not sure how active he is with it any more, so it might be behind the times. In a general sense, I can't believe everyone doesn't use some pwd manager. Just have to remember one, but more importantly, you generate a strong password for your applications. You couldn't tell someone your banking password if you wanted to, because it's something like QW&$(nkfskdoeYIY, that you'd never remember (which is kind of the point, I think). Good luck, you should follow up with your analysis and reasons why you landed on what you did.

Gilles Plante

I also use LastPass. A few years ago I read about password managers and liked the fact that LastPass does not know how to decrypt the passwords - if you loose your password then nobody can retrieve your passwords ;) Works on Windows, MacOS and iOS.

Gilles Plante

matblue25

KeePass because it stores your encrypted passwords in a file that you control, not on a central server. The only thing that bothers me about it is that you have to trust different developers for the KeePass apps on the various OSs. For iOS, I counted 8 different apps that claim to be KeePass compatible. So which one do you trust? A few years ago, I had a problem with a KeePass app for Blackberry and, after contacting the developer, learned that the app was keeping a debug log that had unencrypted passwords in it. The developer fixed it in a subsequent release.

raddevus

Are you on Linux, by chance? If you are you can try C'YaPass and get it from the Snap Store: Install C'YaPass - Never type a password again. for Linux using the Snap Store | Snapcraft[^] If you want the source you can get it at GitHub: GitHub - raddevus/CYaPass-Electron: The official C'YaPass desktop app built on Electron (runs on Windows, Linux, Mac)[^] Since that is an electron app it means it runs on all three major platforms with no changes (win10, MacOS, Linux). If you pull the code and follow the steps in the readme, it will build it for you platform. I've also developed it as a PWA (Progressive Web App) and you can try it out just by pointing your browser at my (secure) site: C'YaPass : Never type a password again[^] PWAs have to be run from a site that has HTTPS so I've used my newlibre.com web site. Since it is a PWA, it means that you can save the app to your device "desktop" like any other app (for iphone and android phones or pads).

sasadler

Yes 2) Yes 3) PasswordMaker Pro 4) It's open source, very simple to use, doesn't store generated passwords and is fairly configurable. See 'passwordmaker.org' for more info.

Choroid

Write your own or here is my Shameless promotion It won't make Slants top 10 but it works [^]GitHub - e-d-n/PW-Keeper: Code for PW Keeper Tutorial at our Web-Site https://androidstackoverflow.com[^]

Slow Eddie

Me too. easy to use and I keep it on all my machines and sync them periodically. That way id I add a new PW it wind up everywhere. Great Stuff! and it's FREE!

My favorite.