Password management

Forums › Desktop computing › Password management

1 | 2 | 3 | 4

BDFL - Memuneh
79250 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2039647 18-Jun-2018 13:00

Depending on the site, if you have 2FA enabled you might see a second page after entering the password so that you can enter the code. On Geekzone you enter the password and code on the same page. You open the app, find the site and the code will be valid for 30 - 60 seconds, then a new code shows up.

DamageInc

549 posts

Ultimate Geek

Lifetime subscriber

#2039761 18-Jun-2018 13:57

freitasm:

Depending on the site, if you have 2FA enabled you might see a second page after entering the password so that you can enter the code. On Geekzone you enter the password and code on the same page. You open the app, find the site and the code will be valid for 30 - 60 seconds, then a new code shows up.

ok cool

My wife explores the same sites so i need to make sure whatever i put in place is simple and wont frustrate the crap out of her

Pop! OS

Lias

5589 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#2039768 18-Jun-2018 14:03

DamageInc:

freitasm:

Depending on the site, if you have 2FA enabled you might see a second page after entering the password so that you can enter the code. On Geekzone you enter the password and code on the same page. You open the app, find the site and the code will be valid for 30 - 60 seconds, then a new code shows up.

ok cool

My wife explores the same sites so i need to make sure whatever i put in place is simple and wont frustrate the crap out of her

2FA is specific to your account, rather than the device.. so unless you are sharing accounts (which is its own bad practice), anything you do to secure your accounts won't frustrate her.

I'm a geek, a gamer, a dad, a Quic user, and an IT Professional. I have a full rack home lab, size 15 feet, an epic beard and Asperger's. I'm a bit of a Cypherpunk, who believes information wants to be free and the Net interprets censorship as damage and routes around it. If you use my Quic signup you can also use the code R570394EKGIZ8 for free setup.

DamageInc

549 posts

Ultimate Geek

Lifetime subscriber

#2039773 18-Jun-2018 14:19

Lias:

DamageInc:

freitasm:

Depending on the site, if you have 2FA enabled you might see a second page after entering the password so that you can enter the code. On Geekzone you enter the password and code on the same page. You open the app, find the site and the code will be valid for 30 - 60 seconds, then a new code shows up.

ok cool

My wife explores the same sites so i need to make sure whatever i put in place is simple and wont frustrate the crap out of her

2FA is specific to your account, rather than the device.. so unless you are sharing accounts (which is its own bad practice), anything you do to secure your accounts won't frustrate her.

Sounds good thank you

Pop! OS

dt

1152 posts

Uber Geek
Inactive user

#2039961 18-Jun-2018 18:32

Great! looking into one of these at the moment.. Dashlane has caught my attention.. is anyone here using/used it or is lastpass the goer?

Lias

5589 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#2040018 18-Jun-2018 20:34

dt:

Great! looking into one of these at the moment.. Dashlane has caught my attention.. is anyone here using/used it or is lastpass the goer?

I think lastpass is probably the "market leader" but don't quote me.

kiwicam

136 posts

Master Geek

#2040293 19-Jun-2018 10:17

Lias:

2FA is specific to your account, rather than the device.. so unless you are sharing accounts (which is its own bad practice), anything you do to secure your accounts won't frustrate her.

Even better, get her setup on Lastpass too and setup sharing for the services you both use e.g. Netflix: https://helpdesk.lastpass.com/sharing-4-0/

Equinox IT

Cloud spending continues to surge globally, but most organisations haven’t made the changes necessary to maximise the value and cost-efficiency benefits of their cloud investments. Download the whitepaper From Overspend to Advantage now.

freitasm

BDFL - Memuneh
79250 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2040294 19-Jun-2018 10:19

Or get a family account so if anything happens the other person has access to the services.

ratsun81

508 posts

Ultimate Geek

#2040621 19-Jun-2018 16:24

dt:

Great! looking into one of these at the moment.. Dashlane has caught my attention.. is anyone here using/used it or is lastpass the goer?

Im using Dashlane, have been doing so for over a year now. Im very happy with the service.

Quic Broadband

Use R212389ELFLL2 promo code for free setup at checkout.

dt

1152 posts

Uber Geek
Inactive user

#2041861 21-Jun-2018 17:43

ratsun81:

Im using Dashlane, have been doing so for over a year now. Im very happy with the service.

I ended up going with Dashlane and so far am very impressed and happy with the purchase.

The security report it gave me scared the crap out of me.. I've been terrible with my passwords.. insane the amount of accounts I have as well !

Rickles

2933 posts

Uber Geek

Trusted

#2041987 21-Jun-2018 20:39

Might be stupid questions, but -

A password manager will certainly both generate and keep track of the various web sites etc that one may frequent, BUT what happens if -

(a) someone steals my laptop and happens upon the 'master' password … do they then have rampant access to all my websites/accounts simply because the password manager then allows it?

(b) the password manager generates a suitably complex random password for a site that I might want to access from someone else's machine … how do I know what the password might be (unless I record it elsewhere)?

JimmyH

2886 posts

Uber Geek

#2041990 21-Jun-2018 20:44

DamageInc:

Ok this leads me to my next question please - which password manager?

I use a 50 cent notebook which I keep in the desk drawer, and a biro. Low tech, but cheap, simple and reliable.

Gurezaemon

~HONYAKKER!~
1353 posts

Uber Geek

ID Verified

Lifetime subscriber

#2042017 21-Jun-2018 21:14

Rickles:

Might be stupid questions, but -

A password manager will certainly both generate and keep track of the various web sites etc that one may frequent, BUT what happens if -

(a) someone steals my laptop and happens upon the 'master' password … do they then have rampant access to all my websites/accounts simply because the password manager then allows it?

(b) the password manager generates a suitably complex random password for a site that I might want to access from someone else's machine … how do I know what the password might be (unless I record it elsewhere)?

(a) Yep, they would. So just as you do not write your PIN on your cash card, you make sure that your master password is not recorded on the machine. A highly secure master password does not need to be hard to remember. Something like "pringles armpit stinky" is highly secure, and easily remembered.

(b) Various options are workable here, such as using Lastpass, or an offline solution such as Keypass or Password Safe synced with Dropbox.

HTH

Lias

5589 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#2042027 21-Jun-2018 21:47

Rickles:

Might be stupid questions, but -

A password manager will certainly both generate and keep track of the various web sites etc that one may frequent, BUT what happens if -

(a) someone steals my laptop and happens upon the 'master' password … do they then have rampant access to all my websites/accounts simply because the password manager then allows it?

(b) the password manager generates a suitably complex random password for a site that I might want to access from someone else's machine … how do I know what the password might be (unless I record it elsewhere)?

A: You don't want to ever safe your master password anywhere, other than perhaps in a sealed envelope in a safe with your will or something. The master password isn't strictly speaking a password, it's actually the encryption key for the password vault.

B: You use the mobile version on your smartphone, and if you're not already using a 2FA authenticator you can use lastpass for this too.

dt

1152 posts

Uber Geek
Inactive user

#2042296 22-Jun-2018 10:41

Rickles:

Might be stupid questions, but -

A password manager will certainly both generate and keep track of the various web sites etc that one may frequent, BUT what happens if -

(a) someone steals my laptop and happens upon the 'master' password … do they then have rampant access to all my websites/accounts simply because the password manager then allows it?

(b) the password manager generates a suitably complex random password for a site that I might want to access from someone else's machine … how do I know what the password might be (unless I record it elsewhere)?

No questions ever stupid!

(a) Yes they will have access to everything IF they happen upon your master password.. now some measures to protect you against laptop theft would depends on how far you want to take your level of protection.. you could always encrypt your laptop HDD and also put a bios password for very high level security.. that way your laptop is effectively a brick.. windows wont boot and even if they were to pull the hdd out of it they wouldn't be able to access any of the files.

(b) speaking for the manager I recently purchased, Dashlane.. there is a mobile app that syncs all your passwords.. I use an iphone and it requires my finger print to unlock the app.. there are also browser extension available which require your master password to access.

These password managers are a really good idea.. I've moved my wife and my mother onto it. only slightly more effort involved while you're starting out and a few hours of time over the week to go through changing all your passwords across various sites but once its done and you're use to the process its nice, easy and extremely safe!

1 | 2 | 3 | 4