Best password manager?

They all kinda serve the same purpose. Really no reason to bother switching and LastPass is pretty good.

yes i have you her ther mer ler vir plo mool ther ama da

31-05-2018, 07:05 AM

behindtheshadows Wrote: They all kinda serve the same purpose. Really no reason to bother switching and LastPass is pretty good.

Yeah, it's not too shabby.. I'm just a little wary of them considering the multiple bugs Google found last year in the LastPass browser extensions for Chrome/Firefox/Edge that would give an attacker access to LastPass's remote procedure calls including getting plain text passwords, running arbitrary code, etc...

LastPass Fixes Software Error That Exposed Passwords

To be fair, they were open about it and released patches quickly, but still...

31-05-2018, 11:29 AM

Bassdrop Wrote: Yeah, it's not too shabby.. I'm just a little wary of them considering the multiple bugs Google found last year in the LastPass browser extensions for Chrome/Firefox/Edge that would give an attacker access to LastPass's remote procedure calls including getting plain text passwords, running arbitrary code, etc...

LastPass Fixes Software Error That Exposed Passwords

To be fair, they were open about it and released patches quickly, but still...

Did not even know about the incident. I am very smart so i remember most of my passwords. However my friends uses lastpass so much like he swears on it. I tried password managers and they are good, LastPass is good however it is obvs not perfect.

And really, none of them are perfect.

A big thing is that they all do really the same thing and it is a pain in the ass to transfer everything to a different password manager.

Just stick to LastPass, I don't trust those small companies.

Prince is actually right though. As all the reasons i listed above, i would like to add that. I am not sure if this is what he meant, but i mean the #1 password manager with a big company and a big reputation is more likely to not screw you over than a small company barely in buisness. just saying

31-05-2018, 11:33 AM

behindtheshadows Wrote: Did not even know about the incident. I am very smart so i remember most of my passwords. However my friends uses lastpass so much like he swears on it. I tried password managers and they are good, LastPass is good however it is obvs not perfect.

And really, none of them are perfect.

A big thing is that they all do really the same thing and it is a pain in the ass to transfer everything to a different password manager.

I can (and do) remember plenty of complex passwords, but ultimately there's just too many to remember sinceI don't use the same password in multiple places.. there's websites, email accounts,web/vps servers, ftp servers, sql databases, wifi networks, routers, devices, game accounts, operating systems, voicemail accounts, pin numbers, public/private keys, the usernames/logins/emails to go along with those passwords, etc. etc.. Previously I used a book where I wrote down partial/cryptic passwords (enough that I could figure out what they were, but not enough that anyone else could do anything with it... they'd be lucky to even figure out what sites they were for, since I didn't write that down fully either)... it got to the point that it took me 5 minutes to even find the page I was looking for sober.

I've got about 200+ passwords in LastPass atm, but a lot of the sysadmin-type stuff like sql database passwords I still use a book.

I don't store banking passwords or anything like that of course, and tend to use 2FA when it's available, so I suppose it wouldn't be the end of the world if something did end up happening... *knock on wood*

31-05-2018, 01:07 PM

Bassdrop Wrote: I can (and do) remember plenty of complex passwords, but ultimately there's just too many to remember sinceI don't use the same password in multiple places.. there's websites, email accounts,web/vps servers, ftp servers, sql databases, wifi networks, routers, devices, game accounts, operating systems, voicemail accounts, pin numbers, public/private keys, the usernames/logins/emails to go along with those passwords, etc. etc.. Previously I used a book where I wrote down partial/cryptic passwords (enough that I could figure out what they were, but not enough that anyone else could do anything with it... they'd be lucky to even figure out what sites they were for, since I didn't write that down fully either)... it got to the point that it took me 5 minutes to even find the page I was looking for sober.

I've got about 200+ passwords in LastPass atm, but a lot of the sysadmin-type stuff like sql database passwords I still use a book.

I don't store banking passwords or anything like that of course, and tend to use 2FA when it's available, so I suppose it wouldn't be the end of the world if something did end up happening... *knock on wood*

Well then... If you have to remember 200+ passwords having a password manager is superhandy. Honestly, i do not need that many and for that reason i just remember them in my head. And the most imporatnt is my email password because it controls everything. I used LastPass, and it is the best option (not a good one, but the best one out of all the others)

If you do not have to, it is better not to use a password manager. But if you have to then, you should pick the best (the most reputable and legit one)

31-05-2018, 01:10 PM

behindtheshadows Wrote: Well then... If you have to remember 200+ passwords having a password manager is superhandy. Honestly, i do not need that many and for that reason i just remember them in my head. And the most imporatnt is my email password because it controls everything. I used LastPass, and it is the best option (not a good one, but the best one out of all the others)

If you do not have to, it is better not to use a password manager. But if you have to then, you should pick the best (the most reputable and legit one)

Well, I've decided I'm gonna switch to KeePass whenever I find the time/motivation to make the transition...

But here's why I'm gonna go with them over LastPass:

• Completely open-source, so I don't have totake them at their word that it's impossible for them to see my passwords
  
• I decide where to store my database.. can be locally,on a server I control via SFTP, in the cloud, etc... as opposed to the LastPass password warehouse in the cloud, which is an obviously-tempting target for hackers.
  
• LastPass, as the most-used password manager, has a huge target on its back due to the potential rewards from compromising it
  
• KeePass doesn't run in the browser, which isanother obvious target.. won't be losing all 200+ passwords due to browser bugs that allow data to leak between tabs
  
• Supports 2FA, Windows certificates, RSA certificates, token-based authentication via OATH HOTP (iPhone) and TOTP (Google) one-time passwords
  
• Shitloads of plugins, allowing for things like using it to automatically enter passwords into SSH/Putty, Remote Desktop, SQL databases, etc. as well as generating passphrases, encrypting/decrypting using RFID/NFC and tons of other shit.
  

That said, it's definitely not as user-friendly as LastPass and more geared towards techy types... also not recommended for anyone who can't keep files properly backed up as you could lose your whole password database fairly easily.