Password management

Forums › Desktop computing › Password management

1 | 2 | 3 | 4

3181 posts

Uber Geek

Lifetime subscriber

#2039136 17-Jun-2018 15:12

Well strike one for your email provider being bought out.

My first webmail address from 1998 has leaked in three breaches but then that provider was forced to change it domain names and the new updated address is still clean !

kryptonjohn

2523 posts

Uber Geek

Lifetime subscriber

#2039139 17-Jun-2018 15:28

freitasm:

@DamageInc:

freitasm:

Visit https://haveibeenpwned.com/ to check if your email's leaked and https://haveibeenpwned.com/Passwords to check if your password has leaked.

Dam not a good result visiting the above links.

Do you use Authy as well as a password manager or just Authy?

I use LastPass on my browser and smartphone. Authy is a 2FA (SECOND FACTOR) so it's in addition to your password.

I recommend Authy beause Google Authenticator doesn't do backup of your codes and you lose your phone or reset it, you are in trouble.

You can enable 2FA on Geekzone on your profile page.

Thanks for this... have now setup Authy on my account and on my cellphone. Have also added the Authy add-in to chrome, but need to add the GZ code there (manual option only). How do I get my Authy code from GZ?

Cheers
JohnO

dafman

3925 posts

Uber Geek

Trusted

#2039179 17-Jun-2018 18:08

sidefx:

My setup is Keepass for everything, synched through dropbox - has an app for pretty much every platform I've come across. And 2FA where possible (though should really use it more)

+1 Keepass synched via dropbox.

KeepassDroid works a treat if you have an android.

Lias

5589 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#2039190 17-Jun-2018 18:44

Lastpass + Authy, unique password on every site, and unique email on most sites.

I'm a geek, a gamer, a dad, a Quic user, and an IT Professional. I have a full rack home lab, size 15 feet, an epic beard and Asperger's. I'm a bit of a Cypherpunk, who believes information wants to be free and the Net interprets censorship as damage and routes around it. If you use my Quic signup you can also use the code R570394EKGIZ8 for free setup.

wazzageek

1093 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#2039214 17-Jun-2018 19:24

I have keepersecurity - their browser plugin gets very slow when a page has a lot of inputs in it, something Ive noticed as I'm developing. I've been pondering if i have made the correct choice.

michaelmurfy

meow
13240 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#2039216 17-Jun-2018 19:26

I use Lastpass + Authy also and have done so for years. I use the Lastpass paid plan. Works very well for my needs!

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

kryptonjohn

2523 posts

Uber Geek

Lifetime subscriber

#2039242 17-Jun-2018 20:12

Lastpass for me too. Can't imagine doing without it.

Equinox IT

Cloud spending continues to surge globally, but most organisations haven’t made the changes necessary to maximise the value and cost-efficiency benefits of their cloud investments. Download the whitepaper From Overspend to Advantage now.

mdf

3512 posts

Uber Geek

Trusted

#2039256 17-Jun-2018 20:33

Lias:
Lastpass + Authy, unique password on every site, and unique email on most sites.

@lias I've started doing unique emails too, but I've found it to be a bit of a pain setting up a new alias each time I want to sign up for something. Do you use a catch-all email address or something else?

freitasm

BDFL - Memuneh
79250 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2039258 17-Jun-2018 20:38

@mdf... GMail and other email systems allow you to use your base email address plus something:

freitasm+geekzone@gmail.com
freitasm+hotmail@gmail.com

No setup needed, just use it.

mdf

3512 posts

Uber Geek

Trusted

#2039263 17-Jun-2018 20:41

freitasm:

@mdf... GMail and other email systems allow you to use your base email address plus something

I did this for a bit but kept running into sites that didn't like the + symbol. I've got a g suite domain (grandfathered free plan) and my main address is firstname@lastname. I usually add service@lastname as an alias but the g suite dashboard requires a fair few clicks to do that.

tripp

3848 posts

Uber Geek

Trusted

Lifetime subscriber

#2039336 18-Jun-2018 06:28

enpass here for me.

I have tried a few but like enpass, it syncs between devices but uses your own dropbox, google drive etc rather than keeping the info on a 3rd party server.

No monthly fee you just buy the app (iOS or Android) and they have a free windows app. Has support for chrome, firefox etc.

MurrayM

2455 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#2039382 18-Jun-2018 08:47

I use Keepass on my desktop machines and phone, all synced to my own server. For 2FA I switched to Authy after Google Authenticator screwed me over when I had to replace my phone due to a hardware problem.

Varkk

643 posts

Ultimate Geek

#2039383 18-Jun-2018 08:49

freitasm:

@mdf... GMail and other email systems allow you to use your base email address plus something:

freitasm+geekzone@gmail.com
freitasm+hotmail@gmail.com
No setup needed, just use it.

Only problem with that is that while the +appendage is in the email specification a lot of website software (in particular shopping carts) seem to not support it. Leading to either the + part being stripped or the message just never getting through. It is good as often you can use it to track who leaked your address, assuming the spammers don't just strip the + part when getting a list. I really should get on to setting up my own domain and just run a unique alias for each site (e.g geekzone@mydomain.com)

As for passwords unique for each site generated and managed by Keepass. I don't trust services like Lastpass as they have leaked passwords a few times.

Lias

5589 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#2039419 18-Jun-2018 09:21

mdf:
Lias:

Lastpass + Authy, unique password on every site, and unique email on most sites.

@lias I've started doing unique emails too, but I've found it to be a bit of a pain setting up a new alias each time I want to sign up for something. Do you use a catch-all email address or something else?

Yes, so literally anything @mydomain works

DamageInc

549 posts

Ultimate Geek

Lifetime subscriber

#2039561 18-Jun-2018 11:46

Brilliant, massive response.

Yesterday i went with Last Pass, went through all the sites that i have entered passwords etc loaded into Last Pass. Browser extensions done and synced, same with iPad.

I see quite a few people install Authy as well. How much does it change the way of logging into a website ie Geekzone, 1 day sale etc or does it work in the background?

Pop! OS

1 | 2 | 3 | 4