Password Managers - what's worth trying?

Forums › Desktop computing › Password Managers - what's worth trying?

1 | 2 | 3

mattwnz

20155 posts

Uber Geek

#1785971 22-May-2017 14:04

freitasm:

LastPass. And make sure you activate 2FA - on LastPass itself and every other site where you can. And use Authy because it syncs 2FA tokens (or LastPass itself). Do not use Google Authenticator because if your phone is gone, it's gone.

I had this problem with Google Authenticator, where my phone died. But I found I could disable 2FA in lastpass, and then was able to access it without 2FA. Then I could setup Google Authenticator on another phone. In a way it is a bit of a concern you can disable it to do this though.

mattwnz

20155 posts

Uber Geek

#1785973 22-May-2017 14:06

joff_nz:

I don't really understand the technical side, but to a layman the idea of putting all my login info in one place makes me nervous. Obviously there's a big userbase on here of people who know a lot more than I do, is it not something to be concerned about? What about if I get my wife setup with the same, she's technology resistant, but whenever she gets a new device we have to go through the process of resetting all passwords because she can never remember what they were.

I share that concern. Especially if you have your bank account hacked, I wonder if the banks would say you were careless by having your password in one of these systems, and whether in their fine print, they forbid it. But the fact is very few people can remember a secure password, and have a different password for every single site. It isn't uncommon these days to have 200 or more passwords for different sites.

freitasm

BDFL - Memuneh
79270 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1786045 22-May-2017 15:22

I actually though about the suggestion of using LastPass 2FA and think you should have a different approach - passwords on LastPass and 2FA with Authy (Authy works and sync between multiple smartphones and Chrome browsers), while Google Authenticator doesn't).

Having 2FA on LastPass defeats the purpose of having more than one required set of credentials in different locations.

Yabanize

2350 posts

Uber Geek

#1786105 22-May-2017 17:31

Previous LastPass user, but switched to 1Password a few months ago, it seems much more polished and LastPass would do annoying things like ask me to save a password when I just saved it, ended up with a lot of duplicates.

LastPass seems far from polished to me.

bluey

82 posts

Master Geek

#1786117 22-May-2017 18:07

Here's what Lastpass says about lost authenticator

Whenever you login with Google Authenticator enabled, you are prompted to use your authentication code to login. Underneath the entry field for your code , there is a link entitled

"If you lost your Google Authenticator device, click here to disable Google Authenticator authentication."

Clicking this link will send an e-mail to your LastPass account e-mail address (or security e-mail address if you have set one), that will contain a link that will temporarily disable your Google Authenticator. If you do not receive an email from LastPass, please ensure that emails are not going to Spam and are not blocked by email filters. If you are unable to access your e-mail for some reason, and have lost your Authenticator device, please contact LastPass support.

Tinshed

278 posts

Ultimate Geek

#1786807 23-May-2017 14:59

Can I put in a word for 1Password. I have in the past used the KeePass/DropBox combination and liked that well enough. And it was free, and very secure, too. But I wanted a more comprehensive password management program, including one that could handle attachments. As I am heavily invested in the Apple eco-system I thought I would try 1Password and am very glad I did. The auto-fill is of course very handy but I especially like the flexibility 1Password has for handling other types of information. For example, I keep all of my various purchased software details, including license keys, date of purchase, etc. Also I keep bank account details, passport details, along with scanned attachments. Basically all of the sensitive information I want easy access to across platforms and devices I keep in 1Password. I know you can most of that with KeePass, but 1Password makes it very easy and straightforward.

Of course it does cost $$'s and Agilebits, the makers, are, like so many software vendors, trying to move everyone to an annual subscription model. Yuk. But 1Password is well supported and Agilebits are very responsive. The reality is these days if want to live online, you need really to manage you passwords proactively and diligently to help stay safe and secure. 1Password certainly helps me to that.

Tinshed
Wellington, New Zealand

ripdog

548 posts

Ultimate Geek
Inactive user

#1786819 23-May-2017 15:09

Lastpass here.

Oh, WRT Lastpass Authenticator: It does not store your 2FA in the cloud, so anyone who got your LP creds would not get your 2FA tokens. The nice integration it DOES do is it allows you to simply press yes on a prompt in the app when you access a site on your PC which asks for a 2FA code. The apps transfers the code to your browser. Also allows one-tap 2FA to lastpass itself.

1 | 2 | 3