Which is your preferred password manager software? 2nd Edition. New and improved

Scannerman · Aug 19, 2023

Amazing how in this age of encryption so much stuff still gets hacked.
Think I'll just keep my little black book.

TraderGary · Aug 19, 2023

Scannerman said:
Amazing how in this age of encryption so much stuff still gets hacked.
Think I'll just keep my little black book.

You're aware, of course, that AES 256-bit encryption has never been hacked. Obviously encryption isn't the problem.

Scannerman · Aug 19, 2023

There needs to be an "other" in that little poll.

Edwin · Aug 19, 2023

K...,
I don't think I totally got it at first, but..., this is very cool and very handy!
And, Proton Pass seems very sophisticated and secure... I'm likin it!

kelper · Aug 20, 2023

Scannerman said:
There needs to be an "other" in that little poll.

The number of responses is limited so I preferred to offer as many PMs as possible.

antspants · Aug 20, 2023

I always used 1password. But after version 4 and like everyone else seems to be trending lately, they went subscription. And it’s getting harder to use 1password 4 everyday, all the blocks and disabling updates etc, just so I can keep using the old version, because if i don't, they force the new version on you via update and ask you to pay for a subscription which is seriously rude and probably illegal to some degree because I outright paid for version 4

glasskuter · Aug 20, 2023

Roboform has worked flawlessly for me for over 10 years and I consider it to be the most valued app I have. Current price of $2 a month (less if one buys a 3 yr subscription) is less than most people spend for a cup of coffee. If a user has only one device, Roboform is FREE. I use it as more than a password manager. Each important account is flagged and has instructions what my husband needs to do if I pass away. He doesn't even know my master password (he wouldn't remember it anyway) but it's in the safety deposit box with instructions how to use it. I also keep protected notes about all kinds of other things I don't want to forget and everything follows me no matter which of my 6 devices I'm using.

Edwin · Aug 20, 2023

Stigg · Sep 5, 2023

A year after the disastrous breach, LastPass has not improved

A year after the breach, LastPass still failed to deliver useful mitigation steps. The technical issues haven’t been resolved either.

palant.info

antspants · Sep 5, 2023

Edwin said:
View attachment 68392

glasskuter said:
Roboform has worked flawlessly for me for over 10 years and I consider it to be the most valued app I have.

Is it a requirement that one uses the cloud vault or can you leave the vault locally on the PC only?
And can these sync wirelessly to PC from devices? (as 1password does)

TraderGary · Sep 5, 2023

Stigg said:
A year after the disastrous breach, LastPass has not improved

A year after the breach, LastPass still failed to deliver useful mitigation steps. The technical issues haven’t been resolved either.

palant.info

The author apparently does not understand how "zero knowledge architecture" and hashing algorithms work. He should know that the hashing algorithm used by LastPass cannot be reverse engineered to obtain a user's password. As far as I know, all password managers are based on the same "zero knowledge architecture".

All password managers use AES 256-bit encryption, which has never been broken. There is no evidence that any LastPass user has ever had his password vault decrypted, even though the hacker obtained a noncurrent backup vault. I wouldn't exactly call that, in the author's words, a "disastrous breach".

My Master Password is a 32 character passphrase that I'm quite confident is secure. I've used LastPass for the past 15 years and will continue to do so.

Edwin · Sep 5, 2023

Proton Pass is cloud based - Android and iOS with extensions for Chrome, Edge, Firefox and Brave.

antspants · Sep 5, 2023

Edwin said:
Proton Pass is cloud based - Android and iOS with extensions for Chrome, Edge, Firefox and Brave.

Cheers. I am having trouble finding a password manager that allows local vaults only if one chooses & with the ability to sync to PC. No way in hell am I storing a vault online.
1Password 4 does it, but they switched to subscription and seem to be forcing cloud vaults, and it’s getting harder to prevent the app from automatically upgrading to 1Password 7

glasskuter · Sep 5, 2023

antspants said:
Is it a requirement that one uses the cloud vault or can you leave the vault on the PC only?
And can these sync wirelessly to PC from devices? (as 1password does)

The vault is in the cloud. If it can alternatively be on one's device, I am not aware of it. Devices do not sync directly to each other but through Roboform server.

Encryption of master password is done on the device(s) so no one at Roboform can access the master password it is forgotten. RF does offer 2 step verification for master password if one chooses to use it.

Browser integration is available for all major browsers (Windows and Apple) which makes accessing sites and automatically logging in very easy. (It works with Android devices too but I don't have any) Just download and enable your browser extensions.

One can choose how often RF requires the user to enter his master password if one leaves his system on all the time or, it automatically requires the master password when the computer restarts. With my portable devices (iphone, ipad) I have biometrics so I use my fingerprint rather than having to enter my master PW.

Since I've been using it so long , over time I have organized many of my logins in folders as well as all my safe notes. It just took a while for me to learn how to do that.

If you're interested try out their free version on one of your devices before you buy to see if you like it. You can always buy it afterwards so all your devices can sync. There's a 20% Labor Day discount until 9/16 Best Password Manager: No more writing down passwords

Edwin · Sep 5, 2023

@antspants
What do you want to use it for, just storing passwords or to also assist in filling web credentials, etc.?

antspants · Sep 5, 2023

glasskuter said:
The vault is in the cloud. If it can alternatively be on one's device, I am not aware of it. Devices do not sync directly to each other but through Roboform server.

Encryption of master password is done on the device(s) so no one at Roboform can access the master password it is forgotten. RF does offer 2 step verification for master password if one chooses to use it.

Browser integration is available for all major browsers (Windows and Apple) which makes accessing sites and automatically logging in very easy. (It works with Android devices too but I don't have any) Just download and enable your browser extensions.

One can choose how often RF requires the user to enter his master password if one leaves his system on all the time or, it automatically requires the master password when the computer restarts. With my portable devices (iphone, ipad) I have biometrics so I use my fingerprint rather than having to enter my master PW.

Since I've been using it so long , over time I have organized many of my logins in folders as well as all my safe notes. It just took a while for me to learn how to do that.

If you're interested try out their free version on one of your devices before you buy to see if you like it. You can always buy it afterwards so all your devices can sync. There's a 20% Labor Day discount until 9/16 Best Password Manager: No more writing down passwords

Thank you so much, @glasskuter

Edwin said:
@antspants
What do you want to use it for, just storing passwords or to also assist in filling web credentials, etc.?

Yes mate, just storing passwords. I don’t think I’ve ever saved web credentials in 1Password. It just makes it much easier to login via browser extensions especially as my passwords are either ridiculously long or ridiculously complicated. Being able to sync devices to the PC vault and the latest changes on whatever device compiling in the main vault is a bonus with 1password.

Stigg · Sep 5, 2023

Experts Fear Crooks are Cracking Keys Stolen in LastPass Breach – Krebs on Security

krebsonsecurity.com

antspants · Sep 5, 2023

Stigg said:
Experts Fear Crooks are Cracking Keys Stolen in LastPass Breach – Krebs on Security

krebsonsecurity.com

Interesting that PLEX was a gateway. Pays to update I suppose.

Scannerman · Sep 5, 2023

My preferred password management software isn't on that list.

It's called My Little Black Book.

It's entirely analog and requires some academic knowledge of coding, such as an alphabet and base 10 mathematics.

Specialized hardware, such as a pen or a pencil, and a notebook, are essential.

Some organizational skills are beneficial when running this software and it must be run by a cognizant, sentient, biological entity.

Bots, root kits, rats, and Trojans are incapable of running this highly specialized software.

Since I've used it my system has remained reasonably safe from malware and other malicious entities.

Anyone interested in this software is welcome to privately message me and I will tell them how they can get started with it.

Wynona · Sep 5, 2023

Scannerman said:
My preferred password management software isn't on that list.

It's called My Little Black Book.

It's entirely analog and requires some academic knowledge of coding, such as an alphabet and base 10 mathematics.

Specialized hardware, such as a pen or a pencil, and a notebook, are essential.

Some organizational skills are beneficial when running this software and it must be run by a cognizant, sentient, biological entity.

Bots, root kits, rats, and Trojans are incapable of running this highly specialized software.

Since I've used it my system has remained reasonably safe from malware and other malicious entities.

Anyone interested in this software is welcome to privately message me and I will tell them how they can get started with it.

Geez! Someone who uses the same password app I use!

The main coding I use is that I never, ever, use my real email addy in this special app. I've coded it so I know what it is but no one else does.

BTW, mine's a Little Pink Notebook . . . That's the only color they had at WallyWorld at the time. Most of my students have gone the same route.