Password Managers

[Rex A. Butcher]

What ho one and all,

Here in the UK, Tesco Bank made the headlines recently because of a hack and X thousand customers lost money (which is/has been reimbursed.)

And today, in tone of the papers, there is a big article about internet security, particularly with respect to Password managers.

I have tired and did not like LastPass and KeePass, and today, I see another Dashline, which gets good reviews. Personally I use RoboForm. What I like about RF is that it is on my computer and I have control of it. All the others seem to require the creation of an on-line account and the data is stored in the 'cloud.'

Apart from the fact the hopefully, one's cloud stored passwords are secure, I do not like the thought that my passwords are actually stored on someone else's computer. over which I have no control whatsoever.

Am I missing something?

[Steve R Jones]

If you had multi devices and or travel a lot - the cloud storage becomes a good thing.

[Rex A. Butcher]

Good point. I don't have multiple devices and don't travel much. In fact, when I do travel, it is a relief not to be tied to checking e-mail and phone.

[jdc2000]

The "cloud" storage also leaves you open to hacking. LastPass was hacked. A flash drive you own is a better idea. 1Password is another one to consider.

https://en.wikipedia.org/wiki/1Password

http://www.asecurelife.com/dashlane-...rm-vs-keepass/

https://www.comparitech.com/password...ssword-review/

[HAN]

With my current needs for all my passwords, they have to be a keyboard away. Everywhere!

I use several mobile devices and 2 computers almost daily. I have lots (and lots) of passwords. Paper and pencil could not work for me at all. I'd forget to bring the notebook, I'd lose them, I'd burn them, whatever. A disaster! After a time with SplashID, and later, KeePass, I switched to LastPass. It has been and remains the best solution for me. If I didn't have it, my password security would suffer because I would end up reusing passwords (which, BTW, is a horrible, horrible idea.) Thanks to some changes over time with syncing capability, I could make things like KeePass or RoboForm work. But, IMO, they are harder to deal with than LastPass. Is LastPass perfect? No. But the LastPass developers have done a great job handling bugs and/or potential hacks. I trust them. (And yes, I know LogMeIn owns them. To date, that doesn't affect my opinion.)

You mention Dashlane. I've never used them but I've not been tempted at all. From a consumer perspective, they offer a similar business model to LastPass. But they are nearly $40 a year vs $12. Knowing how this all works, I question why would I pay more for the same thing? They are no more perfect than LastPass https://blog.dashlane.com/dashlane-update-1/ but are worth more than 3 times the annual price?? Nope! (In the interest of being fair, Ormandy found LastPass issues too. https://blog.lastpass.com/2016/07/la...-updates.html/ )

[jdc2000]

Possibly useful links:

http://www.techrepublic.com/article/...persons-guide/

http://www.techrepublic.com/article/...persons-guide/

http://www.techrepublic.com/article/...epass2android/

[PhiloVance]

Use two. I use an online one (Last Pass) and an offline one (Password Depot), both very good at making up secure passwords. Don't rely on your memory except for the master password. You can even use Last Pass on your smart phone and I think PW Depot is working on that feature too.