Password managers

[ICIT2LOL]

I came across this this morning Password Managers Compared: LastPass vs KeePass vs Dashlane vs 1Password and I am wondering if I should be using something like the first one listed because it is free and I am never really sure of passwords as there always seems to be so many.

Any thoughts and advice on the use of these softwares??

 

[Lady Fitzgerald]

I've been considering the same thing for the same reason. I saw the same article this morning. I've seen good things about LastPass and DashLane, which appear to be the best two of the bunch. Both LastPass and DashLane do not have a portable application according to the chart yet the description of LastPass says the Premium version does have a mobile app. The one thing that DashLane has that LastPass does have is Offline access and even that isn't totally true since, once you access the folder with the passwords online and transfer it to your devices.

LastPass Premium version is only $12/yr compared to DashLane's $40/yr. I'm leaning strongly toward LastPass.

 

[ICIT2LOL]

Well Jeannie I thought maybe a way around the portable version is to make a stick with all the passwords on it and then Lastpass it?? (the stick)

Just because at the moment I keep my passwords on my phone in a form I know but it is a pain to have to make sure the phone is with you at all times and is up to date because again I tend to forget say my EBay PW and keep on having to retrieve it.

 

[Callender]

I've used LastPass and Dashlane.

Dashlane was fairly resource hungry and although I liked it - after they upgraded to a new version it started capturing credit card details for every transaction that I processed through my workplace's shopping cart (customer details) and I could not find a way to disable it on a per site basis. Maybe they fixed that but I haven't used it since then.

On the plus side I did like Dashlane Courier - send encrypted secure notes that self destruct after the recipient viewed them. Very good.

LastPass: Currently I use it to log into many sites where security isn't an issue.

That means:

No duplicate password that is used for more than one site.
No password saving for internet banking or email accounts.

Note: LastPass has been hacked a few times:

https://blog.lastpass.com/2015/06/lastpass-security-notice.html/

What that means is that if you use it keep an eye out for emails from them and also keep an eye on security news.

So far only master passwords have been compromised and the only action needed was to change your master password. Your saved passwords for websites were not compromised.

1Password:

Never used it. It seems that you must download the desktop app and install it (like Dashlane)

I guess for that reason I'll stick with LastPass (browser extension)

 

[Lady Fitzgerald]

Thanks for sharing your experiences with password managers, Chris. I would rep you but I need to spread it around more (mutter, mutter, mumble, mumble).

 

[z3r010]

I've just started testing out lastpass yesterday for remembering all my general non-sensitive passwords, I paid for the premium and have on order a Yubikey4 for 2 factor authentication on the lastpass account.

So far it seems to do just what I need and I can start using random huge passwords all around the net without the need to remember them.

 

[Lady Fitzgerald]

I've just started testing out lastpass yesterday for remembering all my general non-sensitive passwords, I paid for the premium and have on order a Yubikey4 for 2 factor authentication on the lastpass account.

So far it seems to do just what I need and I can start using random huge passwords all around the net without the need to remember them.

I looked at the Yubikey 4 link you provided and, from what I could see, it was just for logging onto computers rather than provide two factor authentication for a program or website only. I would love to see more from you about Yubikey once you have had a chance to "play" with it some.

 

[z3r010]

Here is the page on lasspass about them - https://lastpass.com/yubico/

They can also be used for securing google/gmail accounts among other things.

 

[Lady Fitzgerald]

Thanks again, John. One thing I'm still wondering is what happens if one loses the Yubikey?

 

[z3r010]

Dunno, I'll try to find out when they arrive tomorrow.

 

[Lady Fitzgerald]

Thanks!

 

[ThrashZone]

Well I hope you write them down instead of remembering them John

 

[z3r010]

Well I hope you write them down instead of remembering them John

I bought 3 yubikeys just to be sure

 

[ThrashZone]

Is that a new pen

 

[Callender]

Thanks for sharing your experiences with password managers, Chris. I would rep you but I need to spread it around more (mutter, mutter, mumble, mumble).

No worries!

RE: LastPass hack.

There's been no problem with it unless you used the same password for other sites as your LastPass master password - then you'd need to change passwords for any affected sites. Only LastPass master passwords were obtained and not the individual passwords stored and used to access other sites.

 

[HAVOC]

I've been using LastPass for a couple months (the paid version, so I can use the mobile version, 1$ a month). I really like the password generator.
There are some sites that I can't get to work (my bank). I just remember the login/password for those.

 

[z3r010]

Your bank is a site where you should tell it to go away and you will be responsible for the password yourself.

 

[HAVOC]

How about saving the Lastpass login info to a .csv (Excel file), is that safe?
I used to save login info to a text file :shock:
I have since changed all my passwords using Lastpass.

 

[ICIT2LOL]

I've used LastPass and Dashlane.

Dashlane was fairly resource hungry and although I liked it - after they upgraded to a new version it started capturing credit card details for every transaction that I processed through my workplace's shopping cart (customer details) and I could not find a way to disable it on a per site basis. Maybe they fixed that but I haven't used it since then.

On the plus side I did like Dashlane Courier - send encrypted secure notes that self destruct after the recipient viewed them. Very good.

LastPass: Currently I use it to log into many sites where security isn't an issue.

That means:

No duplicate password that is used for more than one site.
No password saving for internet banking or email accounts.

Note: LastPass has been hacked a few times:

https://blog.lastpass.com/2015/06/lastpass-security-notice.html/

What that means is that if you use it keep an eye out for emails from them and also keep an eye on security news.

So far only master passwords have been compromised and the only action needed was to change your master password. Your saved passwords for websites were not compromised.

1Password:

Never used it. It seems that you must download the desktop app and install it (like Dashlane)

I guess for that reason I'll stick with LastPass (browser extension)

Thanks for the heads up Chris it looks like I shall be trying the LastPass then it seems to make a lot of sense to me.

Just one thing what did you think of my comment on making it portable??

Edit Again I would rep but seems a spread around job

 

[Callender]

Thanks for the heads up Chris it looks like I shall be trying the LastPass then it seems to make a lot of sense to me.

Just one thing what did you think of my comment on making it portable??

I haven't used the portable LastPass but from what I'm reading:

The portable USB thumb drive version requires a portable browser installed.

I just tested the other option - Lastpass Pocket and basically it's just a way to store your data. There's an option to easily show/ hide passwords that requires your master password. All you do is run the executable.

​

If you want to see plain text passwords it requires your master password.

​

You can keep data locally or get it from your Lastpass online account.

​

I see they do indeed offer a desktop app. Personally I'm happy with the LastPass browser extension.