VOGONS


First post, by xjas

User metadata
Rank l33t
Rank
l33t

As the title says. I'm in password hell and this is a WAY over-due item on my to-do list.

Right now most of my passwords are stored in a plaintext file, on a Mac Mini that's not usually connected to my network. That may not actually be a bad solution from a technical standpoint, but it does become a bit of a pain in the butt. Also, a probably-should-be-embarrassing number of passwords are stored in post-it notes on my kitchen table. Looking to moderninze a bit. 😜

That said, I'm also weary of losing access to old accounts years down the road, if the service I'm using goes under. Not sure if any of them have a plan to deal with that. Some kind of local sync app that's usable without an internet connection would be ideal.

A while ago I got locked out of an email account I had for over a decade because I forgot all the fake info I put into the security questions (not that I checked it more than once a year), and my Skype account is DOA until I remember what the hell I decided my birthday should be in 2008. Clearly I'm doing something wrong.

I notice Lastpass & Dashlane are getting shilled alot from some of the big yt tech channels, but that doesn't mean they're good.

Suggestions?

twitch.tv/oldskooljay - playing the obscure, forgotten & weird - most Tuesdays & Thursdays @ 6:30 PM PDT. Bonus streams elsewhen!

Reply 2 of 9, by badmojo

User metadata
Rank l33t
Rank
l33t

Dashlane here after trying and disliking Lastpass. I find myself getting annoyed with Dashlane from time to time too but I think that’s just because I’ve become so dependant on it, and if the website in question does something wonky with their login functionality then there’s only so much that an app can do to auto fill it.

It looks like they all offer export / import functionality for each other so you can try a few without having to re-do the set up - I’m amazing at how many logins it’s collected for me.

Life? Don't talk to me about life.

Reply 3 of 9, by SPBHM

User metadata
Rank Oldbie
Rank
Oldbie

I mostly can remember my password but I'm also currently using the text files to make sure (which are in a 4GB encrypted drive kept at a strategic location!), I think it works reasonably well, but a good open source manager would be appealing, I'll check KeePass

Reply 4 of 9, by xjas

User metadata
Rank l33t
Rank
l33t
badmojo wrote:

Dashlane here after trying and disliking Lastpass. I find myself getting annoyed with Dashlane from time to time too but I think that’s just because I’ve become so dependant on it, and if the website in question does something wonky with their login functionality then there’s only so much that an app can do to auto fill it.

It looks like they all offer export / import functionality for each other so you can try a few without having to re-do the set up - I’m amazing at how many logins it’s collected for me.

Seems Lastpass offers multiple devices & sync for free, but on Dashlane that's a paid feature... what did you dislike about Lastpass?

I'd be tempted to use Keepass (kee-pass? keep-ass?) and just store the database on my ownCloud host, but I've had a bunch of really irritating issues & bugs with OC lately that is putting me off. Still, always like FOSS solutions when I can.

twitch.tv/oldskooljay - playing the obscure, forgotten & weird - most Tuesdays & Thursdays @ 6:30 PM PDT. Bonus streams elsewhen!

Reply 5 of 9, by BloodyCactus

User metadata
Rank Oldbie
Rank
Oldbie

lastpass and use google authenticator and a yubikey nfc for 2fa. i only use the yubikey for lastpass. i add google authenticator to any account that takes it as a 2FA option.

--/\-[ Stu : Bloody Cactus :: [ https://bloodycactus.com :: http://kråketær.com ]-/\--

Reply 6 of 9, by badmojo

User metadata
Rank l33t
Rank
l33t
xjas wrote:

Seems Lastpass offers multiple devices & sync for free, but on Dashlane that's a paid feature... what did you dislike about Lastpass?

It was ages ago so can't remember to be honest, other that it doing some dumb stuff that made me rage quit. But I know it gets good reviews and it's probably improved since I tried it - also it's probably a different experience depending on the user and their behavior.

Just try a couple I'd say!

Life? Don't talk to me about life.

Reply 7 of 9, by clueless1

User metadata
Rank l33t
Rank
l33t

I've been using the combination of Lastpass and Keepass for roughly 9 years. There have been some annoyances with Lastpass, like it not autofilling on certain pages, etc. But overall, it's made it possible to use long random passwords on all websites. Keepass I use for non-web-based passwords as well as an emergency offline backup for some of the more important things stored in Lastpass.

The more I learn, the more I realize how much I don't know.
OPL3 FM vs. Roland MT-32 vs. General MIDI DOS Game Comparison
Let's benchmark our systems with cache disabled
DOS PCI Graphics Card Benchmarks

Reply 8 of 9, by wiretap

User metadata
Rank Oldbie
Rank
Oldbie

Keepass. Been using it for years and love it. I avoid storing passwords in online password managers.

My Github
Circuit Board Repair Manuals

Reply 9 of 9, by ZellSF

User metadata
Rank l33t
Rank
l33t

I'm a fan of telling most people to use their browser's password manager (especially Chrome and Safari users) for most stuff. Just remember to disable autofill.

A dedicated password manager is just another app that needs access to your passwords in addition to your browser (which will eventually get them to log into sites). You're just doubling the amount of software you have to trust, doubling the risk of compromise.

They do offer a major convenience feature (not being limited to just browser passwords) and a major security feature (securing data at rest, but few people need this and even fewer are willing to make the convenience trade-off).

SPBHM wrote:

I mostly can remember my password but I'm also currently using the text files to make sure (which are in a 4GB encrypted drive kept at a strategic location!), I think it works reasonably well, but a good open source manager would be appealing, I'll check KeePass

You should never remember any passwords you use for any online services.