How do you keep track of all your passwords?
I write them down
15% (69 votes)
I use the same password for everything
14% (65 votes)
Password manager software (which one?)
19% (86 votes)
Document them on my computer (tell us how)
3% (15 votes)
I remember them all
30% (135 votes)
More than one of the above
16% (73 votes)
None of the above (tell us what you do)
2% (11 votes)
Total votes: 454
I store my passwords as a
I store my passwords as a series of text files on a TrueCrypt virtual partition. I use SVN over HTTPS to synchronize the encrypted passwords across computers.
I have a trick
I have a trick to have good and long passwords, different for each site.
(The whole trick is in French here)
First, choose a sentence, then take the first letter of each word.
If the sentence is original enough, you'll have no problem remembering it.
"My grandma grinds pink foxes in the wind." ---> mggpfitw
Then add a few digits and symbols: mggpfitw568**
Next use a part of the domain name and add it to the password:
eg. mywot.com ---> mtc ---> mtcmggpfitw568**
zdnet.fr ---> ztf ---> ztfmggpfitw568**
Be inventive ! You can choose a different way to mix your password and the domain name.
This is a good password, because:
* It's not a dictionnary word (this prevents dictionnary attacks)
* It's long (this prevents brute force and RainbowTable attacks)
* It's different for each site (prevents inter-sites hacking)
* It's easy to find: You don't have to remember a different password for each site. You can retreive the password for any site.
Finally, never ever let any software remember your passwords.
good trick
high 5 man ,love the idea.
great trick
great tip for remembering your passwords, good idea
Just LastPass manager
Just LastPass manager
passwords
ROBOFORM PRO
Storing password on disk : Not a good idea.
LastPass, KeePass, Roboform... remember that if the passwords are stored on the harddisk, there is always a possibility for a rogue software to steal them, even if they are encrypted.
On CCM forums, we have seen a person distributing a new malware (which has not recognized by any of the 40 antiviruses of VirusTotal) and it was stealing stored passwords of Firefox (all your websites and FTP account), TeamSpeak, Skype and Steam.
I strongly advise against those password storage programs.
-
That's the point. It's better to write them on a piece of paper. But - also a paper can be stolen (and that almost happened to me before!), so it is also advisable to encrypt them by hand. There are thousands of ways to do that, no need for an encrypting engine on a handwritten list.
--
Per aspera ad astra
hand written encryption
i use a symbol system known only to me and nobody i know of has broken it yet on paper.
-
Good idea, but as long as each symbol has a letter associated with it, you can narrow it down
--
Per aspera ad astra
I secure my passwords
I secure my passwords in a database CUEcards® 2000
http://www.mhst.net/cuecards2/ on a TrueCrypt volume
I use a scratchpad and use a
I use a scratchpad and use a password generator to create new ones.
---------------------------------------------------------------
Signatur:
Prevention is best protection...Stay safe.
/any questions? -leave a message thx\
Writing them on paper is a
Writing them on paper is a good idea. I don't store them in my computer, it isn't safe. I remember them all.
Sig: Stay safe. Use WOT.
Pass Words are Stored On.....
My pass words are in my password book that I keep and I also let Firefox keep and enter them for me. It's great that way. "Indian Boy"
writing them down might seem
writing them down might seem like a good idea, however finding and making sure that you still have that paper is a hassle. storing them on the computer is horrible, for all you know your practically giving away all your personal information without knowing it. so remembering them is best (: and also everyone~ remember to change important passwords within a two months or less. you never know what can happen.
be safe~ (:
Passwords
I memorize most then encrypt the rest in my smart phone.
I write same passwords
I always use same password on every site!
memory
There can be no other way.
-------
Against Intuition - gives us safety through Web of Trust.
WOT Community - gives us security through unity.
Thank you all
- G7W
Password Methodology
I write down my passwords in a notebook which I have kept updated for many years. My convention for generating a new one is to use a phrase that is a question, which is relative to something in my Life, and then add numbers and special characters to it.
I have a ....
I've got a little red book that I store my passwords in. I've got a chronic pain/fatigue problem and therefore over the years I've lost all but a very few close friends who could care less what or where my passwords are. I spend most of my time at home so it is doubtful any thief will steal my book. Dead people can't read.
Passwords
Mine are kept in Norton's log-ins
1Password for Mac
Excellent product which works with Snow Leopard. I use RoboForm for my VMware Fusion 2 virtual Windows Vista x64 system. Until I used 1Password I thought RoboForm was the best. Only downside is that Opera won't exchange code with either to allow them to develop for their platform and I hate the Wand.
mnemonic
mnemonic data storage with USB technology
-------
Against Intuition - gives us safety through Web of Trust.
WOT Community - gives us security through unity.
Thank you all
- G7W
Passwords
Sorry ! duplication, see below
Passwords
bmw1942
A simple system which consists of 3 elements:
1)- the year & month we are in i.e 09.10/
2)- my special secret password = "4 letters + 2 Digits/Symbols" (Scrambled)
3)- The name or "initials/abbreviation" of the program/service to be accessed.
ex: for WOT :
09.10/xxxxxx-WOT
This system allows me to change my password every month, in which case I reverse the process & date according to the month being "Even or Odd" Number:
WOT-xxxxxx/11.09
No system is fool proof but, so far, this one has served me well at work & at home.
my passwords
first i take a random symbol, like ?
then i take two random letters (you can use your initials, your friend's initials, some random letters that you remember etc.) let's say your initlas are YZ.
then you take the first 2 CONSONANTS in the site name, so for mywot.com it would be mw.
Then you take the first 2 VOWELS: so for mywot it would be yo.
Then you take your favorite number, like 6.
So the password would be ?yzmwyo6
of course, thats not my real password :-P
As for how I keep a track of my passwords...
I usually remember all of my passwords. If not, I write them on a paper. That paper just happens to be one page of one of my sketchbooks, and I've got many sketchbooks, so...
Another thing what I tend to do is that I store the password in my mobile phone. Not sure if that's the best idea, though. You never know, I might accidentally forget the phone somewhere and then someone else, of course, has an access to it, and... Well, you know. He/She might use it for different sort of things and find the password(s).
But yeah, I rely on my memory and the piece of paper. =]
By the way, sebsauvage, that's a very good trick. =)
KeePass
If you have too many passwords to remember, KeePass, http://keepass.info/ is probably the best software to manage them for you. It uses strong AES encryption, and you can choose the number of rounds of encryption to increase the time a brute force attack takes. It also encrypts the password in your ram even when you are viewing the database and clears the clipboard after you copy it over to the web form. Some people think this still less secure than writing it down but as I said, a brute force attack would never finish in your life time, and if computers do increase in speed, even by 10 000x, it would still take thousands of years to crack. Also now since you are copying and pasting the password to the web form, which should be using https, key loggers won't be able to see the password if you are someone who types it in every time. It all depends on whether or not you think it's more likely for someone to get access to your password database, or loose the notebook you write all your passwords in.
Just wanted to add that
Just wanted to add that unless you need to keep track of 20+ different passwords, writing them down may still be better, but with keypass, you are able to quickly generate and store passwords like "#tTY$%YedGDT5yWER34tsf" which are very secure unless someone somehow gets both your password database and is able to crack it within your lifetime, which again requires so much computing power, it would only be worth it if you are a billionaire and store all your banking info with it. And don't forget that KeePass is open source!
Passwordstate
We develop a product called Passwordstate for securely storing all your passwords. It's free for up to 10 users, and can be used at home or can scale to many users. You can find all the details and get your free registration key at http://www.clickstudios.com.au.