Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Storing Passwords?

31 Oct 2014   #21
UsernameIssues

W7 Pro SP1 64bit
 
 

Quote   Quote: Originally Posted by Layback Bear View Post
If you don't have passwords on your computer they can't be hacked.
Not true in all cases. If I were to write on a Rolodex card in a location that my laptop's camera could see, then a hacked camera could steal that password.

Not a hack, but as you know: writing on a pad can leave info on the next sheet. I've found some interesting info on hotel pads.


My System SpecsSystem Spec
.
31 Oct 2014   #22
Layback Bear

Windows 7 Pro. 64/SP-1
 
 

That is surly one thing I didn't think of for computer security.

Quote:
Not a hack, but as you know: writing on a pad can leave info on the next sheet. I've found some interesting info on hotel pads.
My System SpecsSystem Spec
07 Dec 2014   #23
paulyjames

Windows 7 Home Premium 64 Bit
 
 

Okay so i have keepass 2 in my laptop and also have it saved it to a usb. My issue though now is how do i input this same keepass 2 program to my iphone 4s? Thus all the passwords i have in my keepass 2 are very long thus generated by keepass itself. I cannot log into any of my email accounts etc b/c i cant just copy and paste the username/password from my laptop or usb to it. Can someone tell me how i can do this?

Apparently theres a mini-keepass program for the iphone but is it the same or not same thing? I can't imagine you guys manually typing each password into mini keepass on the iphone so how are you guys doing this?

How do you copy the file from desktop version of keepass to the phone? I just copied and then clicked paste on my iphone in my computer and that doesn't work at all... shows error.


I read online that i could download dropbox to do this though? I downloaded dropbox then put the keepass2.0 on it. Then i downloaded dropbox on iphone4s, then signed on... then i see the 2kb of the keepass there. However, how do i get it to minikeepass? It shows file is not viewable. I clicked on open file in ... then it give me option of only google drive. So im confused why this is happening.
My System SpecsSystem Spec
.

09 Dec 2014   #24
paulyjames

Windows 7 Home Premium 64 Bit
 
 

Anyone with keepass2.0 can explain how to get it to work on iphone? Not sure why there is error.
My System SpecsSystem Spec
09 Dec 2014   #25
townsbg

Windows 7 pro 64-bit
 
 

Quote   Quote: Originally Posted by paulyjames View Post
Anyone with keepass2.0 can explain how to get it to work on iphone? Not sure why there is error.
It might help to know the error.
My System SpecsSystem Spec
16 Jun 2015   #26
UsernameIssues

W7 Pro SP1 64bit
 
 

Quote   Quote: Originally Posted by logicearth View Post
I will make this clear. I don't care what you use to secure your passwords. I recommend Lastpass because the folks behind it take security seriously, they are up front and open with every issue. They dont wait weeks to fix it.
Perhaps those using this service should at least change their master password:
LastPass was hacked - Time to change your master password
My System SpecsSystem Spec
17 Jun 2015   #27
logicearth

Windows 10 Pro (x64)
 
 

Quote   Quote: Originally Posted by UsernameIssues View Post
Perhaps those using this service should at least change their master password:
LastPass was hacked - Time to change your master password
If you want to. But that is not needed. Your Master password does not reside on the Lastpass servers an attacker would never get it by attacking them.
My System SpecsSystem Spec
17 Jun 2015   #28
UsernameIssues

W7 Pro SP1 64bit
 
 

The hash of your master password resides on their end.
The salts reside on their end.
Both appear to have been exposed.

Sure, it is unlikely that the hash can be turned back into a password...
...but, I would not say never.

Perhaps I'm reading things wrong, but LastPass seems to want users to change their master password...
Quote:
We will also be prompting all users to change their master passwords.
...as does Krebs, Sophos and every other article that I read.
My System SpecsSystem Spec
17 Jun 2015   #29
margrave

Size 12
 
 

If LastPass seems risky, just use KeePass.
My System SpecsSystem Spec
17 Jun 2015   #30
logicearth

Windows 10 Pro (x64)
 
 

Quote   Quote: Originally Posted by UsernameIssues View Post
The hash of your master password resides on their end.
The salts reside on their end.
Both appear to have been exposed.
What resides on their end is an authentication hash that is made in-part with your password but it goes though so many iterations you cannot get your master password from it. It goes though thousands of iterations on the client side before sending to Lastpass. It then goes though several more iterations before being stored. The sole purpose of that authentication hash is just to say "yes you are the owner of this data." An attacker cannot use it to decrypt your data or to your account.

Of course you can read all about in the Lastpass blog.

And btw, the salt is just for their end on storing the authentication hash. Overkill but still adds some strength to the stored hash.


Quote:
Sure, it is unlikely that the hash can be turned back into a password...
...but, I would not say never.
Is it never. It is mathematically impossible, that is not even a debate. It goes though so many iterations it can never be turned back to the source material.

You can read more about the iteration mechanism they are using here: https://en.wikipedia.org/wiki/PBKDF2

Quote:
Perhaps I'm reading things wrong, but LastPass seems to want users to change their master password...
Quote:
We will also be prompting all users to change their master passwords.
...as does Krebs, Sophos and every other article that I read.
Of course they would say that, it is a smart thing to say. But doesn't mean it is necessary.

You can add even more security to your account by adding multifactor authentication to the mix as well. I bought a Yubikey and a subscription to Lastpast just for that.
My System SpecsSystem Spec
Reply

 Storing Passwords?




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Storing Sys Restore point on CD?
Just built a new system Around an Asus x79Deluxe and an Intel Core i7-4930K. Went with water cooling and learned the hard way that you can't just use your old PSU on a 4th gen CPU, but that it's gotta be Haswell compliant. Imagine my frustration when the system just blinked on and off. ...
Performance & Maintenance
C Drive getting used up with out storing anything ?
C drive is my default drive for windows installation. Until a week ago, C Drive used to show up free space from 46.x GB to 47.x GB, some times it may show free space up to 50 or 51GB too. But since a week or 2, the space has fallen back to 45.5 GB, now its in the range of 44.2GB - 46.6 GB...
Performance & Maintenance
storing scanned documents
Right now all of my scanned document are stored by the month i.e.. February, March, etc. I do not want them stored this way. I just want them accessible without regard to the month. Help!
Software
Storing a string of characters under one key?
I have a few tediously long character strings which I frequently need to type - can I store them under a single key so that they are available in any application?
General Discussion
Shortcuts storing software need to know?
Hi! Do you know good shortcuts storing software. Like game booster "Game box"
Software
Storing Bits of Memory
Storing bits of memory in nanotube switches. The world of computer memory has been approaching an interesting crossroads. Most people are aware that we are rapidly approaching fundamental limits with both magnetic storage mediums like the hard drive, and in the fabrication of transistors...
News


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 23:39.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App