I admit it. My password security for my many online accounts sucks. Too many accounts share the same low security password.
I want to create new passwords for each account but there is no way I’m going to remember all of them. Does anyone use a password generator and “locker” to store them? I don’t want the list tied to my physical machine, I’d want to store it in someone’s cloud.
I was thinking something as simple as a text file with the passwords stored in iCloud. But, that isn’t necessarily secure either.
Any ideas? I know there are systems out there, I’m just curious is anyone uses them and their opinions on it.
I probably have 20 accounts online, if not more. One of the reasons I want a solution is because I have to use the same one otherwise I forget what it is.
I use 1password (https://agilebits.com/onepassword) and store the single (encrypted) passwords file on Drop Box. The software ties in with Drop Box seamlessly and updates automatically. It is not 100% secure, but you need a single password to unlock all others and that password is kept in your head (hopefully).
I write them down but change something leave the letters all lowercase or write down a e, but the password uses a 3, or numbers when some are special characters. I also don’t write down my user Ids no idea if it will stop some one or note but most stuff I want to keep people away from is on my work machine which is much more secure.
I’ll generally write them down in some form. I use many variations on the same passwords, so I’ll just write down what the variation from the base is. I’m now working from home, but at work I’d leave that locked in a drawer with a physical key. As long as you aren’t leaving them on a post it on your desk, 99% of your password theft risk is from online sources which will never see anything physical on your workspace.
You can put a password on an Excel spreadsheet/Word Document that list all your accounts/pasword & then you could zip it and password protect it as well
But seriously, keep it simple!
Also do some of those accounts offer federated login that would help!!!
I use almost zero caution with my passwords, credit card numbers, SS number, Driver’s license, etc. I simply don’t care. If the thieves can hit Zappos, BofA, Amazon, The Fed (!) then what’s the point IMHO?
FWIW, all of my passwords are in my head. Not hard to remember 123456 and qwerty.
There are versions for Windows, Windows Mobile, Blackberry, MacOs, iPhone and Android. I like it because I can sync my windows version with my iPhone version and always have my passwords with me.
I kind of have the same system but if I guess it wrong enough times, like in iTunes, it forces me to reset
I had my hotmail account hacked so that is what inspired this. And the Zappos hack. I got thinking about how many accounts I have and how stupid it is for me to have the same easy password/combination so I figured one more layer to have to get through isn’t a bad thing.
For general storage of passwords, and confidential info (bank account numbers, etc) I use SplashID which I can sync between my phone and my computer. http://splashdata.com/splashid/ Its also a pretty convenient place to store general info too (e.g. part number for the spark plug my lawnmower uses, etc) since whatever I put in it ends up on my phone and is thus always at hand. Everything is behind a password and if you try it 10 times without getting it right it permanetly locks up so its pretty secure.
I’m also trying out Lastpass which is a tool you install on your compuer that stores your log in info for websites. The storage is in “the cloud” but they say everything is encryted and the security is top notch. So far I like it. You use a strong master password to log in when you start up your browser than it automatically logs you in to your websites. It sounds kind of sketchy but it gets great reviews from the mainstream tech publications. https://lastpass.com/
The disadvanage is your stuff is stored on line and even though it uses serious encryption, that may bother some people. The plus is since it stores your passwords and all you really need to know is your master password, you can have a different, crazy long password for each site. (If you want to got totally nuts it can establish “one time use” passwords that you need a secure thumbdrive to use). Its really a question of whether you trust LastPass more than any individual site like, say, Zappos. I’m still a little on the fence but starting to feel more comfortable with Lastpass.
