Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




10 posts

Wannabe Geek
+1 received by user: 2


# 209101 12-Mar-2017 22:45
Send private message

Amongst my list of 'things I probably should have done 2 years ago' is insitgating a password storage/management system for my home and work related needs.

 

I'm mainly using Windows and android devices, with my wife on iOS and Mac for her photography stuff. Work is basically Windows with no requirement for multi-user at the moment.

 

I've had a browse and there's a bit of talk about Lastpass (mixed opinions) and 1password for Mac.

 

I guess for me something that is straightforward and easy to use is probably more important than a massive feature set.

 

What are people using? Are there definite must-avoids?

 

 

 

Thanks


View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2 | 3
16 posts

Geek
+1 received by user: 1


  # 1735465 12-Mar-2017 23:11
One person supports this post

Hi,

 

I use Padlock

 

https://padlock.io/

 

It does all I require.

 

I like the interface.

 

The only down side is no portable version, I tried to make one but it didn't work.

 

There's versions for windows, mac, android, ios and chrome, I've only used the windows version.

 

https://padlock.io/downloads/


Mr Snotty
8672 posts

Uber Geek
+1 received by user: 4562

Moderator
Trusted
Lifetime subscriber

  # 1735469 12-Mar-2017 23:27
6 people support this post
Send private message

I use Lastpass Premium and it is very good. The Android client is also quite good. I did test 1password and while it has a clean interface etc I didn't think it was as polished as Lastpass (when I tried it anyway).

 

Pros:
1) Chrome integration.
2) Totally cross-platform.
3) Works well with Android.
4) Supports 2FA.
5) Automatic - it'll ask to log you in to some sites.

Cons:
1) Android app can sometimes get in the way.
2) The Chrome app can sometimes mess with some web forms or fail to save a generated password - I believe this has been fixed in a recent update.





 
 
 
 


Webhead
2238 posts

Uber Geek
+1 received by user: 773

Moderator
Trusted
Lifetime subscriber

  # 1735470 12-Mar-2017 23:29
One person supports this post
Send private message

1Password works for Mac, Windows, Android and iOS and you can setup sharing of vaults (so selected sites/passwords) between accounts.

 

Works across various browsers and also lets you store credit card information, other passwords, secure notes etc.

 

Would recommend you give it a try, think it could be a good solution for your needs.





475 posts

Ultimate Geek
+1 received by user: 177

Subscriber

  # 1735472 12-Mar-2017 23:36
2 people support this post
Send private message

+1 Lastpass


286 posts

Ultimate Geek
+1 received by user: 70


  # 1735473 12-Mar-2017 23:44
2 people support this post
Send private message

I use last pass premium and yubi key neo, works great at work and home for windows and great on android devices (with NFC for yubi key). on android I use it to copy and paste the login details as Im not a fan of the overlay app, but it does all I need to. Works fine on the Ipad as it is set to not ask for the yubikey (only because of no usb/nfc).

 

 

 

 





940 posts

Ultimate Geek
+1 received by user: 196

Trusted

  # 1735476 13-Mar-2017 00:17
One person supports this post
Send private message

 

@critofia: ... there's a bit of talk about Lastpass (mixed opinions) ...

 

LastPass is OK. The auto login feature on site like the home router make life a lot easier. I use that on my Unify controller when looking at my daily stats. It also has very good options for the password complexity. See here: https://lastpass.com/generatepassword.php. The browser extension options are the same.

 

 

 

It can be problematic with sites where you have multiple user accounts. I don't know if this is a problem with LastPass or the website owner not implementing correct/useful user name & password fields.

 

Every now then it generates a password and saves the incorrect field on the form which results in a lost password.

 

I've heard others complain that using it on a mobile device is cumbersome. I have no experience with that.

 

 

 

WRT sharing. The free version only allows sharing of individual items, the premium version allows sharing of a folder of several items simultaneously.

 

 

 

Edit: Added sharing info.





Please keep this GZ community vibrant by contributing in a constructive & respectful manner.


286 posts

Ultimate Geek
+1 received by user: 70


  # 1735477 13-Mar-2017 00:35
2 people support this post
Send private message

I've had the same multi-login issue. I have some services for which I have a work login and a personal 'home' login etc. I've just learnt over time that whenever that top right pop-up of 'should we update that stored psassword for you?' comes up, I always hit no if I know there is an alternative login for that site. I ensure i 'copy' generated passwords to the clipboard and save them in the lastpass vault manually if I already have a login for that site. Sometimes the default details created in the vault remember the sign up url and not the login url, but it is pretty smart at figuring it out based on domain. So far only battlenet has been the exception for me as it doesnt allow the use of paste in a password field and doesnt seem to like the extension. I have about 60 different login credentials stored in my vault. Any related to financial (online banking) I keep in my head. I like the security check in lastpass where I can analyse the age and complexity of all of my passwords. The automated password changing, on supported sites, is fantastic.

 

And always, where ever I can, I use 2fa, either the yubi key or an authenticator (google,rsa etc.) or sms, or sometimes all of them.

 

some light password fun readings...

 

https://www.usenix.org/system/files/1401_08-12_mickens.pdf

 

goo.gl/H0exaG

 

edited for link





 
 
 
 


120 posts

Master Geek
+1 received by user: 24


  # 1735495 13-Mar-2017 04:40
One person supports this post
Send private message

Password Safe

 

https://pwsafe.org/

 

It does the job for me and I like the layout


14785 posts

Uber Geek
+1 received by user: 2750

Trusted
Subscriber

  # 1735502 13-Mar-2017 07:03
13 people support this post
Send private message

KeePass2. Open source, clients available for Windows, Android, and probably other platforms. I put the encrypted database on Dropbox and use it on all my computers and devices. Simple and effective, I think it has browser integration but I prefer copy and paste, more difficult to compromise.


1952 posts

Uber Geek
+1 received by user: 513

Lifetime subscriber

  # 1735507 13-Mar-2017 07:28
One person supports this post
Send private message

I have what timmay has.

 

KeePass2. Open source, clients available for Windows, Android, and other platforms. I put the encrypted database on OneDrive and use it on all my computers and devices. Simple and effective, it has browser integration but I prefer copy and paste although that has its own risk e.g. if clipboard is kept open.

 

I have always refused to use Lastpass because of potential risks which over time have turned into actual security failures.

 

The legacy version, which doesn't require .NET, passed a recent EU security audit:

 

https://www.ghacks.net/2016/11/22/keepass-audit-no-critical-security-vulnerabilities-found/

 

 

 

P.S. There are a lot of reviews and comparisons that are useful if you are trying to decide:

 

https://www.howtogeek.com/240255/password-managers-compared-lastpass-vs-keepass-vs-dashlane-vs-1password/

 

Although the reviewers often show their own preferences so they get the finer details wrong. For example, the reviewer in the above article says of Keepass database sharing using Dropbox and similar online services:

 

Of course, at that point, you’re putting your passwords back in the cloud, which invalidates KeePass’ biggest advantage, but it’s there if you want it.

 

The point is not just that it is available online, it is that the target Lastpass interface for hackers is a very public and easily identified URL which Keepass doesn't have.

 

 


1063 posts

Uber Geek
+1 received by user: 81

Subscriber

  # 1735509 13-Mar-2017 07:43
Send private message

jarledb:

1Password works for Mac, Windows, Android and iOS and you can setup sharing of vaults (so selected sites/passwords) between accounts.


Works across various browsers and also lets you store credit card information, other passwords, secure notes etc.


Would recommend you give it a try, think it could be a good solution for your needs.



Best thing for 1password is watchtower, the AgileBits team trawls the news for vulnerability reporting and recommends updating passwords in your vault on this basis. 1passwrd can also do this based on age, and password strength.

They had a blog post up about the latest cloudflare vulnerability within a couple of hours, confirming that their software (and therefore your vault) remained secure, and have since been identfying potentially vulnerable passwords.

Jon

6615 posts

Uber Geek
+1 received by user: 2293
Inactive user


  # 1735511 13-Mar-2017 07:53
Send private message

Jedsdad:

 

Password Safe

 

https://pwsafe.org/

 

It does the job for me and I like the layout

 

 

 

 

Super simple and pretty sure you can bind keys to it as well.
Does the job without any extras that you dont need.


59 posts

Master Geek
+1 received by user: 23


  # 1735532 13-Mar-2017 08:55
Send private message

I've been using Password gorilla for years without problems with windows and linux. It also works with Mac, and I believe Android as well. Works across multiple devices using a dropbox encrypted folder as well as its native encryption.


3718 posts

Uber Geek
+1 received by user: 2179

Trusted
Lifetime subscriber

  # 1735536 13-Mar-2017 08:58
Send private message

+1 Lastpass.. I had concerns when it got brought out by LogMeIN but they appear to have been unfounded.





Information wants to be free. The Net interprets censorship as damage and routes around it.


161 posts

Master Geek
+1 received by user: 30

Lifetime subscriber

  # 1735537 13-Mar-2017 09:01
One person supports this post
Send private message

Keepass 2 on my laptop and Keepass2 android on my phone. I use a dedicated dropbox account for syncing the database.

 

As others have said, open source & easy to cut & paste usernames / passwords.


 1 | 2 | 3
View this topic in a long page with up to 500 replies per page Create new topic



Twitter and LinkedIn »



Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Anyone can broadcast with Kordia Pop Up TV
Posted 13-Jun-2019 10:51


Volvo and Uber present production vehicle ready for self-driving
Posted 13-Jun-2019 10:47


100,000 customers connected to fibre broadband network through Enable
Posted 13-Jun-2019 10:35


5G uptake even faster than expected
Posted 12-Jun-2019 10:01


Xbox showcases 60 anticipated games
Posted 10-Jun-2019 20:24


Trend Micro Turns Public Hotspots into Secure Networks with WiFi Protection for Mobile Devices
Posted 5-Jun-2019 13:24


Bold UK spinoff for beauty software company Flossie
Posted 2-Jun-2019 14:10


Amazon Introduces Echo Show 5
Posted 1-Jun-2019 15:32


Epson launches new 4K Pro-UHD projector technology
Posted 1-Jun-2019 15:26


Lenovo and Qualcomm unveil first 5G PC called Project Limitless
Posted 28-May-2019 20:23


Intel introduces new 10th Gen Intel Core Processors and Project Athena
Posted 28-May-2019 19:28


Orcon first to trial residential 10Gbps broadband
Posted 28-May-2019 11:20


Video game market in New Zealand passes half billion dollar mark
Posted 24-May-2019 16:15


WLG-X festival to celebrate creativity and innovation
Posted 22-May-2019 17:53


HPE to acquire supercomputing leader Cray
Posted 20-May-2019 11:07



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.