Password Madness!

password comparison

This may help. A comparison between dashlane, lastpass, keepass -


I have only used keepass and it is my first program to manage passwords. picked it mainly because it was free

Thanks for the replies.

Reading through the lastpass pricing structure it looks like it's $12 per year for a cross-platform subscription. It appears to be free if you use it only on pc's, or only on mobile devices. And it is showing in the FF add-on list.

RoyB wrote:
... Keep everything on a thumbdrive is probably the safest way to do it......

That is what I do.

Remember, whatever you store "in the cloud" will be seen by everyone at some point. Several celebs now wish their private pictures were never stored "in the cloud".

Mine are all on a tiny thumb drive, which is not left in any of the puters. When I need a password, plug it in, access password file, to get what I need, then remove it. Some few that are not critical, I let Chrome remember them for me. My password on this forum is one I let Chrome keep up with for me.

Beware of using cloud based password managers. LastPass had a major breach of account holders database in June 2015. This was not the first, but one of multiple breaches over the years. The fact is you will always be vulnerable to hacks in the cloud, as there is no way to stop it unless disconnected from the NET. Hackers will always find a vulnerability to exploit. Anyone who works in enterprise IT knows this.

There is no perfect system for password protection. Personally, I would use an encrypted local solution such as KeePass password manager. Make sure to use the optional Windows Secure Desktop for master password. Then use Firefox built-in password database for regular sign ins, such as for email, membership, or shopping. Keep financial separate. Preferably, also hardening the password database by encrypting the entire Firefox profile folder. In general, opt for two-part authentication for sensitive sites where available.

I would not recommend Chrome as it uses Windows User account to encrypt passwords. If anyone has your account credentials, they can read the passwords stored in Chrome. Firefox uses a separate master password for encryption, but separately encrypting the database offers better protection. You can do so in Chrome, but not as straightforward as Firefox.

Firefox appears to bypass the clipboard when transferring passwords. Not the case with most all other methods, which can compromise password or cloud account credentials should rootkit keylogger/clipboard capture malware be running on a system. Which may not be detected initially by even the top rated security software before damage in done.

Personally I'd never store my passwords in "the cloud" for the reasons stated above. I use Roboform, and when traveling, I transfer the passwords from my computer to the computers used in the toyhauler, via a thumb drive. In an encrypted file of course.

I don't use Roboform on any of my Android devices, but I know there is an Roboform app. So I cannot say how well it integrates with the mobile platforms, but I've been using it for over 15 years on my PC's and couldn't be happier with it.

I have mine in Drop Box. Need a code to get in it. Need a code to get on my iPad iPhone or laptop in order to get to Drop Box.

they are in my head
if i forget then i have to go thru the "forgot my password" procedure on the website answering my verification question
get the email , login, change to new password

tedious, but it works for me, every bit of mental exercise keeps the brain sharp
and i'm loosing those neurons everyday, they wont last forever
i just want to die as ME, not as a blithering helpless empty shell

thats why i spend so much time HERE
keeping my brain going over puzzles and problems, helping people instead of vegetating

X2 for Dashlane.

Works well.

Passwords on a tiny thumb drive in your pocket are not accessable via the internet, and are a lot more difficult to hack. If your pockets are not safe, tape it to the back of your desk drawer.