Password security - Printable Version

Password security - Printable Version

+- AiOwares (https://www.aiowares.com)
+-- Forum: Cyber & Forensics (https://www.aiowares.com/forumdisplay.php?fid=65)
+--- Forum: Cyber Security (https://www.aiowares.com/forumdisplay.php?fid=66)
+--- Thread: Password security (/showthread.php?tid=1556)

Pages: 1 2

RE: Password security - nsan3 - 04-02-2021

Have used KeePass before, it does seem to be pretty secure. For me personally though, I am not very comfortable in storing all of one's passwords in a certain location. It is a hazard at some point in time.

RE: Password security - misterbull - 06-05-2021

I used to use KeePass, but quit that and then used notepad and then quit that and used paper, but I switched to LastPass since 3 years ago. I didn't know it had so many vulnerabilities though. Oh well.

RE: Password security - Feir'Dal - 06-05-2021

I installed LastPass as a test and found it so convenient that I couldn't let it go.
But I write important information in Notepad and put it in an encrypted folder.

RE: Password security - lucasyo - 06-08-2021

i've never liked or used password managers but i'll try this one cause it looks so much better and easier to manage than a notepad lol

RE: Password security - NikKlaus - 06-09-2021

I moved over to Bitwarden it even has multi device support that you don't have to pay for. So you can access you vault on your phone or laptops.

Code:
https://bitwarden.com/

RE: Password security - BALTAGY - 06-09-2021

(06-09-2021, 05:28 PM)NikKlaus Wrote: I moved over to Bitwarden it even has multi device support that you don't have to pay for. So you can access you vault on your phone or laptops.

Code:
https://bitwarden.com/

Coded the link, please code any external links

Thanks

RE: Password security - Ratva - 08-18-2021

I use LastPass very good no problem.

RE: Password security - Zary - 08-26-2021

i use Bitwarden
Because can self host~

RE: Password security - wrex - 01-24-2024

(01-06-2020, 04:27 PM)ntdll Wrote: Password managers are important to me. Fundamentally, if you don't know your own passwords, how is someone else going to retrieve them when you dump your authentication?

Word documents, text files and using of the same password in multiple places is entirely non-secure. You may as well buy Zuckerberg some printed fridge magnets with your email accounts, bank details and social security number.

There are billions of pre-cracked and ready hashed passwords out there, so high entropy is your goal. But how is one supposed to know their 16-256 length extended ascii passwords? You're not, which brings me to KeePassXC; which is a FOSS and cross-platform password manager, and the only one I trust. I know there are more out there but I wouldn't trust 1Password, Lastpass and the likes, hence allocating one in particular.

KeePassXC comprises of:

Code:
https://keepassxc.org/

AES (Rijndael) encrypted databases using a 256bit key

Code:
https://en.wikipedia.org/wiki/Advanced_Encryption_Standard

Compatible with KeePass password safe
Cross-platform, open source (FOSS) and works offline

Code:
https://en.wikipedia.org/wiki/Free_and_open-source_software

Holds anything from passwords, to 2FA/MFA recovery keys

Code:
https://en.wikipedia.org/wiki/Multi-factor_authentication

Supports custom URL icons
Supports YubiKey for authentication challenge-response

Code:
https://www.yubico.com/

High *entropy* password creator
Automatic clearing of the clipboard and memory space after a password copy

Using a password manager with a strong master-key is how you should be rolling in 2020. A post-it note on your computer monitor does not cut it anymore, in fact it never did. But reverse-engineering tactics, spying and malware are only getting more sophisticated. Do yourself a favor, enhance your privacy by protecting your passwords.

* Entropy in this context means the strength of a password via information theory.

this good web for us to know more abaout cyber security

RE: Password security - Aveao - 03-29-2024

Actually it is better to remember you passwords by heart, but not password managers. Nor random passwords. So I usually create a password like [username]@[websitename]+[some fixed characters that is same for every password].

It is like a function pwd(x)=u(x)+w(x)+c

I may not use any password managers this way.
Without using a password manager, there is basically no one who can find out this pwd(x) and crack your password