Solved Which is your preferred password manager

To quote Brewster's Millions

None of the Above

LastPass all the way

I use a txt document for my password with a portable random password generator

I read a professional study of all major password managers, unfortunately I did not save the web link.

tl;dr
They are all insecure and not recommended for something important.

Better to use built-in browser password managers.

Enpass

For a small number of sites, you can use a password generator.
For example


It is enough to remember one phrase (Main password).

Save it to your disk and edit it.
For example

,{seed:"LinkedIn", url:"https://_linkedin.com", displayName:"LinkedIn"}

on

,{seed:"Tinder", url:"https://_tinder.com", displayName:"Tinder"}


Many sites can be accessed by using Microsof,Google,Apple ID.
Yes, the clipboard will be used.

I use a Jefferson Disk Cipher to create my passwords.






Then I store them in a Cryptex...

LastPass user here myself. While I could use many of the others, LastPass was the most comfortable for my family. They knew how to use it and were using it. It's well worth the $48 a year for the family plan.

abactuon said:

I read a professional study of all major password managers, unfortunately I did not save the web link.

tl;dr
They are all insecure and not recommended for something important.

Better to use built-in browser password managers.

Click to expand...

Too bad you didn't save the "professional" link as it would be fun to read such total nonsense.

TraderGary said:

Too bad you didn't save the "professional" link as it would be fun to read such total nonsense.

Click to expand...

Reading between the lines, they are probably claiming that because some password managers store your passwords on their servers that they are open to being hacked or leaked. LastPass is one such password manager. There was a data breach only a few years ago. There was also a security incident in September.

This is one of the reasons that I chose Enpass in the end.
It stores passwords locally, but you can choose to back them up to any number of cloud services, if you wish.

Stigg said:

Reading between the lines, they are probably claiming that because some password managers store your passwords on their servers that they are open to being hacked or leaked. LastPass is one such password manager. There was a data breach only a few years ago. There was also a security incident in September.

This is one of the reasons that I chose Enpass in the end.
It stores passwords locally, but you can choose to back them up to any number of cloud services, if you wish.

Click to expand...

The claim is baseless. What is stored on LastPass servers is encrypted data. The data is encrypted before it is sent to the LastPass servers. Nobody working at LastPass can read the data and even if hacked the encrypted data is totally useless to a hacker. The data breach a few years ago did make for sensational headlines though and a lot of click bait. What wasn't talked about was that the hackers got nothing of value. I know how LastPass actually works, and I'll confidently continue to use LastPass.

Bitwarden for all passwords barring any to sites that deal directly with financial matters (the bank for instance). Paper is used for those.

Human Brain -- or None. !!!!

If it's not on the computer then hackers won't have any possibility of getting them -- also some "random password generators" are quite effective but one can't often remember those so no good when usng apps like online banking from a mobile phone.

Cheers
jimbo

None of the above as I have used KeePass since 1856.

I was just using One Note but I incidentally just recently got Sticky Password and I haven't got to use it much yet.
It was a $30 deal on GDGT Deals site for a bundled lifetime subscription of Sticky Password and VPN Unlimited. I have been using this VPN service for a few years now and they are good enough for me specially for streaming geographically locked content.

Total BS on the comments of password managers all being insecure. Yes all the passwords are stored on their infrastructure save for a self hosted bitwarden instances, but the vendors do not store your master password and use industry recognized and vetted encryption standards are used to encrypt your vaults. Now if you use a very poor master password and your vault is leaked there is a chance of someone cracking your vault.

neemobeer said:

Total BS on the comments of password managers all being insecure.

Click to expand...

You assume that everything always works 100%, unfortunatelly that is not the case, there are bugs, vulnerabilities, etc.
Many major password services were hacked and their data leaked. I would never store core passwords in the cloud.
Still the biggest issue is autofill enabled by default, that is the most common way hackers steal passwords.
These days even 2FA protected accounts gets stolen, simply by stealing cookies/sessions, not passwords.

I'm well aware nothing is 100% secure, if it were we wouldn't need additional controls and why security requires defense in depth.

Don't be so damn lazy, people!!!
Just write em down with a pen and paper!!!




Pen..., paper..., ... you do remember what those are, right!?!?!?

Edwin said:

Don't be so damn lazy, people!!!
Just write em down with a pen and paper!!!




Pen..., paper..., ... you do remember what those are, right!?!?!?

Click to expand...

At least use a bit of technology... use One Note on your phone so you don't have to bring the pen and paper with you.