wkswenson wrote:
I use KeePass on a thumbdrive - never online unless I need a password and no cloud hacking/data loss issues.
I also use
KeePass, a free open source manager, for many years. It uses strong AES 256 bit encryption, and you can pretty much keep any type of info in its database. I keep the encrypted KeePass database synced in my Dropbox, so always up to date and available on my computers, tablets, and phones.
I keep all my passwords in KeePass, but acts more as a backup. Most of my passwords are also stored in Firefox's password database, except for banking and financial. Though Firefox uses a master password to encrypt the database, I don't use it. Instead, I place Firefox's profile folder, which contains the database, in a TrueCrypt encrypted container. This significantly hardens the database, making it as secure as standalone password apps, and recommended by Mozilla. Been using the
Secure Login extension which allows one-click access to websites using Firefox.
I'm also weary of storing passwords using proprietary cloud based apps. Who controls or has access to the encryption keys? And how do you confirm this?