Password Managers

[Boydy]

Do you use one?

Do you recommend one?

Are they safe?

I was thinking about starting to use one recently. Then this morning I got an email saying my EA account had a sign-in from Russia and when I logged in the security question had changed to fucking Russian so I couldn't change the password. After a quick call from their customer support and getting my account security reset, I'm a bit more worried than I already was about online security.

[SincereTheRebel]

At work, they use passpack and a yubikey. Seems safe. They haven't been hacked yet.

[wullie]

I'd enable two-step authentication absolutely everywhere it's offered as a minimum.

[SvN]

Yep, I have 2FA on everything. It's a mild irritation at times, but it's worth it.

[Giggles]

I use 2FA where available and use LastPass for everything.

[Boydy]

I've just downloaded LastPass. Not entirely sure what I'm doing with it.

[Samadini]

I use lastpass on everything but not because I'm worried about security, I just can't be arsed remember everything.

[Yaysus]

why lastpass and not the superior keepass? especially since lastpass got bought out by that weird company

[Boydy]

why lastpass and not the superior keepass? especially since lastpass got bought out by that weird company

I have no idea which one is best.

Why is Keepass better?

Dashlane is meant to be good too.

[Disco]

Chrome / Google remembers all mine, probably wildly insecure but very convenient.

[Sir Andy Mahowry]

I just use lastpass.

Everything now has a unique password and I only need to remember one.

[CJay]

I previously used 1Password but now I just allow Safari to store them safely behind my password / fingerprint. I can automatically fill password and username prompts from there.

You should definitely use one and keep your passwords different across the web

[Giggles]

LastPass will work really well on the Pixel 2 Boydy as the new API's in Oreo let you install it as a system app. It'll prompt you when it sees a login and prompt you to save when you add a new app or site.

Google smartlock is built in to Oreo will save everything you want too and works the same with prompts, but doesn't let you generate new random passwords.

[Yaysus]

I have no idea which one is best.

Why is Keepass better?

Dashlane is meant to be good too.

https://www.liquidvpn.com/keepass-vs-lastpass/
https://www.reddit.com/r/apple/comments/1psfmt/1password_vs_lastpass_vs_keepass_vs_dashlane_vs/
https://www.reddit.com/r/privacy/comments/6erbc7/keepass_vs_lastpass/
https://www.technorms.com/34943/battle-password-managers-keepass-vs-dashlane-vs-lastpass
basically, storing your password file on your pc instead of the ""cloud"", making it pretty damn hard to get hacked (not that it's likely with the other programs either)
open source and not closed course like all the other programs/extensions

[Boydy]

Yeah but if it's stored on your pc then how do you access your passwords on another computer or your phone?

[Baz]

I will look after your passwords. PM me.

[Raoul Duke]

I prefer 1Password to LastPass. It's got some cool features like showing duplicate passwords and the like.

https://haveibeenpwned.com is an essential tool to help keep on top of breaches. Register for notifications.

Troy Hunt (security researcher/blogger who run the above site) recommends https://www.f-secure.com/en_GB/web/home_gb/home as a VPN, which I've not been using but will at some point.

[Yaysus]

Yeah but if it's stored on your pc then how do you access your passwords on another computer or your phone?

use one of the tons of plugins to sync it across devices?
make another database with only absolutely needed passwords with one of the keepass phone apps?
:confused:

[Giggles]

I prefer 1Password to LastPass. It's got some cool features like showing duplicate passwords and the like.

https://haveibeenpwned.com is an essential tool to help keep on top of breaches. Register for notifications.

Troy Hunt (security researcher/blogger who run the above site) recommends https://www.f-secure.com/en_GB/web/home_gb/home as a VPN, which I've not been using but will at some point.

LastPass does exactly that. I've zero duplicates as it notified me every time I did.