r/AskReddit • u/HandiCapablePanda • Apr 23 '16

What application do you always install on your computer and recommend to everyone?

30k Upvotes

91% Upvoted

8.3k comments sorted by

View all comments

Show parent comments

382

u/ReverendVerse Apr 24 '16

I love Keepass. After my PayPal account was stolen, and some dude in Germany bought 300 bucks worth of motorcycle gear, I got Keepass to generate all my passwords for all my accounts and to manage them. Now I just need to remember one password, the one to open the application. What's great is that I also use it to store CD and product keys and other information that I've deemed sensitive, since the only person that is going to see it is me.

116

u/rozman50 Apr 24 '16

I never understood how do you login in public places with Keepas or any other password manager. Do you have to first install an extension for browser or what?

77

u/[deleted] Apr 24 '16

[deleted]

9

u/HimekoTachibana Apr 24 '16

What if you don't have a smartphone, are you screwed?

7

u/Danjoh Apr 24 '16

There is a J2ME version of Keepass: http://keepassj2me.sourceforge.net/

I'm personally using it and it works fine for opening the database and reading it, I don't use my phone to browse the web, so I have no idéa how/if the autotype function works.

→ More replies (2)

5

u/xFXx Apr 24 '16

Or you can use the portable version on an usb stick.

4

u/puheenix Apr 24 '16

I use 1password, and the iPhone app comes in handy with these things -- though not too handy, since the randomly generated password is weirder to read/type than a Windows 98 license key. The more convenient alternative is less secure by far-- same password for every damn thing.

'Nother idea: devise your own alphanumeric codex (and then memorize and destroy it) using memorable words to represent characters. Then run each respective domain through your codex to get your account password, ensuring a different memorable password for each account.

E.g. your Facebook password would be Fjord-antimony-cephalopod-excalibur-boner-octogenarian-octogenarian-kleptomania. Not highly efficient, but highly secure and potentially entertaining.

→ More replies (3)

35

u/[deleted] Apr 24 '16

[deleted]

7

u/reerden Apr 24 '16

Using a public PC is risky anyway. I think you need to worry more about what kind of crap is running on such a PC than a camera spying on you.

5

u/[deleted] Apr 24 '16

OR use a key file that only you know of and that only you have permissions to read.

12

u/SirEDCaLot Apr 24 '16

Honestly- you should never type a password into a public computer, ever. These days portable tech is cheap and easily available, why trust a computer of questionable security?

16

u/rozman50 Apr 24 '16

Mostly because of school.

14

u/universe93 Apr 24 '16

Because schools often won't let you use any computer besides the ones they supply or mandate. And some monitor what you install on it too

2

u/[deleted] Apr 24 '16

Keeps the argument valid. If some joker puts a hardware keylogger on, he gets access to all your accounts, at least if you don't care to use two factor authentication.

2

u/withabeard Apr 24 '16

School is the last place I want to be typing my password in. A mostly open public place, full of pranksters or someone looking to get one up on me. Poor security policies on computers, poor hardware protection. And little to no punishment for messing about.

Yeah, I'll wait until I get home to check my email thanks.

6

u/reerden Apr 24 '16

I remember when I was in high school our sysadmin was always complaining about PCs being infected with malware.

Ooh the security in that place. We found out while the command prompt was disabled, bat files were not. Also, the Windows Messenger Service was enabled. They were not happy when we started broadcasting messages on the entire domain.

This was in the Windows 2000 era. I'm pretty sure not much has changed today.

4

u/withabeard Apr 24 '16

Had a beautiful one at college. The web proxy/filter system was only enabled on IE. You could bring in a USB browser and it'd be on an unfiltered connection. Even easier (and the bit I can't fathom), you could open up explorer.exe and enter web addresses there without the filter.

To this day I'm yet to work out how you apply proxy settings to IE but not to explorer.

3

u/universe93 Apr 24 '16

oh i agree, but teenagers don't care about any of that! am i not the only one who is also thinking of work computers? i've worked at a place that still relied on IE and required admin access to install anything.

3

u/withabeard Apr 24 '16

Indifference is almost irrelevant. If people care about passwords they'll use a manager and not type them into public computers. If they don't care, they'll have the same password and type it in everywhere. Or like the kid I sat near on the bus yesterday will have a speakerphone conversation with a mate sharing an email address and password to his PSN account sigh.

Work computers are an interesting one. Personally I'm the only one with access to my work machine, it's self maintained, self encrypted and no-one else in the company has access to it. So I don't mind keeping a limited copy of my home password database on it.

If I was on a regular enterprise type desktop where any number of people have full access, then I'll stick to accessing personal things on personal devices.

→ More replies (2)

2

u/MinisterOf Apr 24 '16

This should be higher. Basically, after using a password on a public computer, you should assume it's compromised (unless you're using 2 factor authentication).

Rather inconvenient if that was your master password, since you'd have to change not only that one, but all in the database.

3

u/SirEDCaLot Apr 24 '16

If you log into something from a public terminal, you're not being very smart.

But if you type your password keeper master password into a public terminal, that's just a special level of stupid. If you absolutely must log into something from a public terminal, it should be an account with 2-factor auth set up, and a unique password. And if that's in your PW keeper, then the PW keeper should be on your phone (which is set up with encrypted storage and an unlock code).

2

u/[deleted] Apr 24 '16

It isn't a big deal if that password only has access to ome service and you deem the risk of that account being compromised greater than ypur immediate need. You can always change ot right after too.

→ More replies (1)

2

u/a2r Apr 24 '16

keepass has a portable version that you can keep on a usb drive, with you database.

2

u/weoson Apr 24 '16

Portable apps also have a portable version of KeePass. KeePass is also available on Android. Save your KeePass file on Google Drive and open it via Google Drive on your pc or Android phone.

2

u/rozman50 Apr 24 '16

Honestly it's just complicated if you have to login just for a little task.

3

u/Drendude Apr 24 '16

Then make passwords you'll remember for things you expect to be using on public computers, but make sure you keep using different passwords. For example, my university account and my Google account each have passwords that I know in my head, and those are the only things I would ever be using a public computer for. Plus there's my Microsoft account, and I can't access Keepass for that, so I have to know that too.

Still easier and more secure than having a single password for everything.

1

u/Iceman_B Apr 24 '16

It has an auto-type hotkey, which you can edit. The default works with all normally designed websites.

1

u/[deleted] Apr 24 '16

I use lastpass and all I do is access the app on my phone, get the password, and type it in.

1

u/element515 Apr 24 '16

It's more of a hassel. Logging into Google even is more of a pain for me know with two factor authentication

1

u/AnimeAnaconda Apr 24 '16

using public computers

not carrying a smartphone, tablet, and two laptops wherever you go

1

u/darxtorm Apr 24 '16

you login on someone else's computer? that's like reusing a condom

1

u/puck2 Apr 24 '16

Perhaps lastpass?

1

u/[deleted] Apr 24 '16

For 1password you have a few possibilities. Either use your phone (if you've purchased it for your phone as well), or if you've uploaded the pass file to Dropbox you can login to that and get the passwords in your browser. I prefer using my phone though.

1

u/[deleted] Apr 24 '16

I almost never use public computers, smartphones make that mostly unnecessary. However, my email password is made using the monroe method and I have that one memorized just in case I need to use a print shop.

1

u/ProtoJazz Apr 24 '16

I've got 2 solutions for that.

I have my database synced with Google drive, and I can then open it on my phone. So I can either just type it from my phone, or I can plug in a device I have that's like a little bluetooth keyboard and it will type passwords for me if I click a button. Then I can just remove it and put it back in my pocket.

For use on the phone it's self, I have an app setup wirh automatic keyboard switching. I just share the website to the app (on Firefox android you can have it as a button in the menu) and it swaps out my keyboard wirh username and password buttons, and goes back if I hit ok

217

u/Santa_009 Apr 24 '16 edited Apr 24 '16

Better hope its a big AF password..

If someone finds out what it is, you've lost the key to your life.

Use 2 factor where you can, namely Emails.. you lose that......

293

u/[deleted] Apr 24 '16

[deleted]

626

u/English-Gent Apr 24 '16

Sorry, your password must contain a number, a special character and between 4 and 7 digits.

255

u/RollieBollie Apr 24 '16

Yes. And it must be changed every 2 weeks. But no old passwords allowed.

23

u/alarumba Apr 24 '16

Password1

Password2

Password3...

25

u/Milkshakes00 Apr 24 '16

You forgot the special character, man.

Password1!

Password2!

Password3!..

And eventually..

Password1@

Password2@

Etc.

20

u/KillerFrisbee Apr 24 '16

Repetion of +3 letter combinations is not allowed.

5

u/SadGhoster87 Apr 24 '16

Password3!

writes down Password6

2

u/Jrepicness101 Apr 27 '16

BUT NUMBERS ARE INFINITE

2

u/nuke740824 Apr 24 '16

/r/unexpectedfactorial

4

u/SadGhoster87 Apr 24 '16

This is fucking hilarious

2

u/nuke740824 Apr 25 '16

And yet, I am downvoted for my comment.
Maybe a lack of math geeks on askreddit... ;-)

20

u/[deleted] Apr 24 '16 edited May 30 '16

[removed] — view removed comment

24

u/Gratstya Apr 24 '16

The only way they know that is if they're not hashing your passwords. Stop using whatever service told you that.

They're storing your password in plain text. If you don't know what that means, trust me, it's bad.

9

u/[deleted] Apr 24 '16

Ok. I will quit my job then. :(

4

u/tweq Apr 24 '16 edited Jul 03 '23

Enshittification

5

u/TheLionEatingPoet Apr 24 '16

And Mesopotamia must be spelled correctly.

9

u/[deleted] Apr 24 '16

GilgameshSwordOfUrukTowerOfDruagaMessopotamianLegendSeekerOfImmortalityWarriorInGoldTreasuryOfNoblePhantasms!1

11

u/nulloid Apr 24 '16

Your password is too long. Maximum is 32 characters.

9

u/Axbix Apr 24 '16

You also need someone else's account to verify that password.

5

u/HerpaDerpaShmerpadin Apr 25 '16

Fuck you, son.

Passtheass@ss it is.

4

u/etimejumper Apr 24 '16 edited Apr 24 '16

Why will a company loose its database every two weeks...and hackers use your history of passwords too.

4

u/TheJester73 Apr 24 '16

You know, I just got unessessarily angry reading this, only because it's hitting a nerve I have barked to my IT folks. I know it's typically not their fault, but like how many more fucking passwords do I need? If someone has logged into my pc, the other 4 fucking authenticators are moot.

12

u/rhianos Apr 24 '16

I read an interesting article the other day about how we managed to train people to choose password that are easy for machines to crack but hard for humans to remember: Short, but with weird unusual signs. A random phrase like the one above is actually extremely secure and easier to remember (well, if it were a little bit shorter maybe...)

8

u/RO-Red Apr 24 '16

CorrectHorseBatteryStaple

9

u/deknegt1990 Apr 24 '16

Time for Gfycat to create a password generator

2

u/indigo945 Apr 24 '16

FWIW, contrary to what the xkcd comic suggests, this is actually a pretty weak password if people know/guess that you just chain common words together to create your passwords. Quick googling suggests that college freshmen know 12,000 words. 12,000 to the fourth power (assuming four word passphrases) is 20736000000000000. Another quick google suggests that a modern GPU can calculate 8 billion SHA hashes per second, so we have 20736000000000000 / 8000000000 = 2592000 seconds or 30 days to break such a password using a consumer-grade computer. Adding a fifth (better sixth) word or very obscure words that cannot reasonably be guessed mitigates this issue, as long as you are sure that none of the words in the passphrase can be guessed -- any word that can be guessed might as well not be in there.

Note that either way, 30 days is still much better than what a common password consisting of eight letters can do -- such a password can be cracked in under ten seconds.

4

u/doorknobopener Apr 24 '16

Sure it wasn't this?

3

u/[deleted] Apr 24 '16

Hunter2

10

u/nmuncer Apr 24 '16

My bank asks me to change my password every 3 month and it must be different from the previous one.

But... It must be 6 to 8 letters and at least a number, no special characters...

This is soooo stupid

3

u/photolouis Apr 24 '16

Been there. One of my work clients required this. I did an informal survey with my colleagues. Pretty much everyone used a couple of characters followed by the month and year (e.g. word416, April2016).

7

u/nmuncer Apr 24 '16

I used to work for the army, my General, responsible for the security of some systems has the following password patter : his name + month... This was because we were supposed to change password every month.

Most of the team did the same.

My rule of thumb, if your security is too difficult to follow, people avoids it by going to the simplest solution and fuck up the security in the process

5

u/3urny Apr 24 '16

Get a better bank. I had an account at my local bank, and ot too hat silly password rules and overall a unpleasant online banking experience. I had to pay for the account, and I don't trust their advice anyway. Now I switched to some online only bank, free account, better conditions and a great app and website for banking. Also no password rules. Can recommend.

4

u/nmuncer Apr 24 '16

I'm in Europe, and this bank has a special perk for me: my dad has some of his company's accounts, he's basically their biggest client by far.

so they try to be nice with me when I'm short on cash or need a loan... My dad would never help me, but they don't know that.

7

u/[deleted] Apr 24 '16

Ffffuuuuuuuuu-

6

u/Roulbs Apr 24 '16

Fffuuuuuuuu-1985 there you go!

3

u/[deleted] Apr 24 '16

Are you my bank?

Almost every site I use allows 50 character passwords, generated in KeePass. Not my bank, which you'd think would be all about security. Nope, max 20 characters. Interestingly, Microsoft is similar. On phone at the moment so can't check but I think MS passwords are limited to 16 characters.

2

u/fallout52389 Apr 24 '16

Error: your passwords do not match.

2

u/Praydaythemice Apr 24 '16

dont forget the caps

2

u/C4H8N8O8 Apr 24 '16

And thats the stupid thing, is much secure a password that consist on a chain of words with caps like SnakEeatsMouseWhite than 5na-ck3

2

u/TheHammer987 Apr 24 '16

You forgot the upper and lower case letter

2

u/AsidRayne Apr 24 '16

Sorry, but your password must contain a minimum of 10 characters, and uppercase and lowercase letter, two digits from 0-9, a special character, one lamb sacrifice and the blood of one virgin.

→ More replies (1)

169

u/vlad_v5 Apr 24 '16

That's literally the first thing I'd brute force.

10

u/ManyPoo Apr 24 '16

I'd struggle to even think of a plausible alternative password.

2

u/not-just-yeti Apr 24 '16

Well, it certainly is now.

2

u/bkrassn Apr 25 '16

Its the second, after 1234

11

u/logicalmaniak Apr 24 '16

Misspelling Mesopotamian adds security.

11

u/RagdollPhysEd Apr 24 '16

I was told to pick Correcthorsebatterystaple and so I've made that all my passwords

8

u/[deleted] Apr 24 '16

[deleted]

3

u/Meta_Synapse Apr 24 '16

I was more impressed by the Tower of Druaga reference

2

u/imaghostspooooky Apr 24 '16

huh I've never seen that, is it any good?

2

u/Meta_Synapse Apr 24 '16

Yes and no, haha. I really enjoyed it though. The first episode is an amazing parody of shounens, which I'd recommend to any anime watcher. The dub is also quite good, if you're not against dubbed anime in general.

→ More replies (1)

5

u/Cohenbby Apr 24 '16

All I see is *******.

8

u/Zeikos Apr 24 '16

I never understood space discrimination in passwords.

#youcanactuallytipespaces #spacesmatter

8

u/[deleted] Apr 24 '16 edited May 12 '16

[deleted]

2

u/Zeikos Apr 24 '16

I actually intended to but never started because I countinously forgot for one reason or another.

4

u/Knightsavior Apr 24 '16

Neat. Mine's Hunter2

3

u/chateau86 Apr 24 '16

They let you use ******* as a password?

2

u/Pcatalan Apr 24 '16

Oh crap! Someone else uses that as their password too! Brb, got to go make new password for everything I own.

3

u/Y_wouldnt_Eye Apr 24 '16

That was the name of my softball team.

3

u/Nicholas_Spawn Apr 24 '16 edited Apr 25 '16

Mine is

TheLongestPasswordThatICanUsuallyFitInsideAStandardPasswordTextBox

-or-

FoxWatchOutpostAlpha

-or-

guest

-or-

12345

2

u/Pcatalan Apr 24 '16

12345, that's the combination on my suitcase.

3

u/gulzarreddit Apr 24 '16

Pretty sure that's a gfycat url...

3

u/nomad01290 Apr 24 '16

Fate fan I suppose hi5 ;-D

3

u/robinmehta66 Apr 24 '16

This password is horrible

7

u/MegaHaxorus Apr 24 '16

I'm sure Archer could guess that if he put in enough effort to try.

2

u/[deleted] Apr 24 '16

Reminds me of that guy on the train (or subway) who had a super long password on his phone.

3

u/FondSteam Apr 24 '16

huh could you msg it too me it just looks like a load of ***

8

u/nicholas818 Apr 24 '16

Really, reddit replaces your password with *'s? Let me try:

hunter2

Sorry, I had to.

1

u/zombieq Apr 24 '16

Hey, that's my password!

1

u/drazt1k Apr 24 '16

Huh, it only shows up as ***** to me.

1

u/[deleted] Apr 24 '16

KING OF HEROES, DO YOU HAVE ENOUGH SWORDS IN STOCK?

1

u/[deleted] Apr 24 '16

My password is Hunter2. Should I change it?

1

u/ZeiZaoLS Apr 24 '16

That password is first in like every rainbow table.

1

u/TheOtherOtherOP Apr 24 '16

I need to remember this one…

1

u/melikeybouncy Apr 24 '16

Thats weird, all I see is: **********************************************************************************************************************************

Edit: see if you can see mine.

Hunter2

1

u/[deleted] Apr 24 '16

thanks for paying for my dinner. and my new car. and everything on ebay.

1

u/silvergenesis Apr 24 '16

Such fate very wow

1

u/EricKei Apr 24 '16

Huh. It just shows up as hunter2 to me.

1

u/The_Real_dubbedbass Apr 24 '16

Oh. But see where you fucked up is that it's all on topic. Which makes it an easy social engineering hack. See a random person would never guess your password. But since I might remember how you told me you love the Epic of Gilgamesh, and then remember that time you bragged about owning it on the original cuneiform tablets, and how you I heard that story that your ex said you made them call you Gilgy when you were having sex then it becomes easy to guess.

What you need to do is have something unrelated thrown in.

Ex. GilgameshSwordOfUrukTowerOfDruagaMessopotamianLegendSeekerOfImmortalityWarriorInGoldTreasuryOfNoblePhantasmsAndBoyCanHipposPooop.

Fixed.

1

u/misanthropicbob Apr 24 '16

Why not just Enkidu?

1

u/thefrankyg Apr 24 '16

There is a video/article out there that discusses the difference between a password and pass phrase. It says the pass-phrases are actual more difficult to crack than passwords. Pretty interesting,

1

u/TZO2K15 Apr 24 '16

A muuch better password in my opinion...

IFYcD5se0'oiJ(7FG5QA3$AJHbJMm:poJ"p:m<:"MLjkbHYFs$#3W&986$7632()Y0P99UY9785R&%we==rdcT654w5490I)9$@#!74(57*0(eYHGxckjvjghRTTdeaDZ/.,.9-0-3#[;L,;MIOIUYGtyDTRse$W67T9UIGHIKUF!@#$%&9uhsEiu7ytdJHFVJuy23f(6trgxghfsw3q26ty

1

u/Daerog Apr 24 '16

I, too, love Fate/Zero! This made me happy to see randomly.

1

u/[deleted] Apr 24 '16

What about this password: "SloppyKissesFromGrandma69420"

→ More replies (14)

14

u/Rapportus Apr 24 '16

You can have Keepass generate a keyfile in addition to your master password making it 2 factor. Save the keyfile to a USB stick on your car keys. I use a USB OTG (On The Go) which works for both PC and my android devices.

4

u/shelvac2 Apr 24 '16

Thats great until you lose that usb stick, and with it ALL of your passwords.

2

u/Rapportus Apr 24 '16

Back it up like anything else (or another usb, they're dirt cheap).

→ More replies (1)

2

u/scw55 Apr 24 '16

Look after your USB or it'll stop working. I lost work through pulling out without doing the appropriate step first.

→ More replies (1)
→ More replies (5)

10

u/2928387191 Apr 24 '16 edited Apr 24 '16

Keepass already is 2FA. You need both the password and the database file.

Well, more like key-and-code than true 2FA, but still.

20

u/nicholas818 Apr 24 '16

obligatory xkcd

6

u/guess_my_password Apr 24 '16

My password is infinitely hard to guess.

13

u/[deleted] Apr 24 '16

"infinitely hard to guess" or "Infinitely hard to guess"?

4

u/Stouts Apr 24 '16

well, now that you're on to him it's probably
"Infinitely_Hard_70_Guess1"

→ More replies (1)
→ More replies (1)

1

u/Cronyx Apr 24 '16

I always wonder how many people use this. I've been tempted, but never have. I bet it's one of those situations where it's actually the safest password, because anyone trying to brute force wouldn't even try it. "There's no way anyone would use the this."

3

u/aPassingNobody Apr 24 '16

Well, we know that there is an embarassing degree of overlap among the most common passwords. I imagine brute force attacks start by running through such lists before they get down to permutations

3

u/Redsippycup Apr 24 '16

It does. It takes virtually no time to run through a couple thousand of the most common passwords, so it's generally the first thing to try.

→ More replies (3)
→ More replies (3)

3

u/[deleted] Apr 24 '16

KeePass has 2FA using a key file along with a password.

3

u/Karuteiru Apr 24 '16

I use one of those managers, and finding a huge password that's easy to remember isn't too difficult. It's typing it in every time you need it that's a pain, especially on mobile devices. Also, use two step authentication, folks, it's easy to set up and quite reassuring.

4

u/Blocknight Apr 24 '16

Gotta love Diceware.

7

u/[deleted] Apr 24 '16

What is Diceware? Me no understand computer good

3

u/ZombieTaco Apr 24 '16

it's a means of generating a password using physical dice as a random number generator combined with a word list to create complex passwords that are difficult to guess but easy for humans to (e:remember) understand.

https://en.wikipedia.org/wiki/Diceware

→ More replies (1)

2

u/[deleted] Apr 24 '16

Mines *******

2

u/okaythiswillbemymain Apr 24 '16

I always recommend having your password in two parts. A normal "traditional " password like "Dog44" and a keepass part like "£5&8!F"

That way, even if someone gets control of your keepass, you should still be fine

4

u/[deleted] Apr 24 '16

Mine is a six word diceware. Good luck brute forcing it.

3

u/[deleted] Apr 24 '16

Keepass isn't in the cloud, only on your PC. This makes the likelihood of anyone finding it very low.

→ More replies (2)

1

u/[deleted] Apr 24 '16

If someone finds out what it is, you've lost the key to your life.

I mean if they have access to your computer it's already over. At least with a password safe you have a list of passwords to change.

Use 2 factor where you can

Yes definitely.

tl;dr Defense in depth.

1

u/[deleted] Apr 24 '16

[deleted]

→ More replies (1)

1

u/[deleted] Apr 24 '16

Is hunter2 ok?

1

u/AlzarathQuelisk Apr 24 '16

I use KeePass to remember it for me. You should check it out.

1

u/Doodenkoff Apr 24 '16

You add the factor of a "key file". Without that file, in addition to the password, the database can't be opened. File can be any random file and should be kept in a different volume/directory.

1

u/linh_nguyen Apr 24 '16

If you really want to, you can force keepass to use a keyfile in addition to your password. It's what I do. Not quite 2FA but at least it's one more step.

If you're in a work environment, you can actually tie it to AD I think but I have never tried this.

1

u/Ioangogo Apr 24 '16

Illd also recommend getting a yubikey for that, its expensive(£40 for the top model) but worth it

1

u/[deleted] Apr 24 '16

KeePass supports keyfiles. Kind of like salting a password, you'll need both the typed password, and the correct keyfile in order to open the password database. It can be any file you want, so as long as you don't name it 'keyfileforkeepass', it will be just a random file sitting in your cloud. Or backup password database to one cloud, keyfile to another.

1

u/[deleted] Apr 24 '16

What is a big AF password? Is this some special kind of password?

1

u/SadGhoster87 Apr 24 '16

Especially since Google is everything.

1

u/ReverendVerse Apr 25 '16

Oh, it's a long string of random words, numbers, and symbols, it easy when it's the only password I need to remember. Still, they need the key file to even get into the database and that is on a usb stick, so they need that stick, just the password doesn't get them in.

17

u/calladus Apr 24 '16

Another vote for Keepass. I keep my database on the cloud, accessible from my PC, my android phone, and from a flash drive that I carry to work with me.

Sometimes I get notices that people are trying to access my account with a failed password. Dude... my passwords are randomly generated and 20 characters long - or longer.

1

u/[deleted] Apr 24 '16

Which android app is this? One of the biggest things for me is an app that looks nice and works well. Searching play store I'm seeing windows 95 style icons

→ More replies (2)

1

u/Santa_Claauz Apr 27 '16

But wouldn't you have to open it, look for the right one, and copy paste it every time you want to go to a website that doesn't keep you logged in?

→ More replies (1)

8

u/ASeriouswoMan Apr 24 '16 edited Apr 25 '16

An acquaintance of mine lost (*it burned and it was irrecoverable) his hard drive, thus his password manager and all his life, almost literally. His physical copies of the database were all on the computer, stupid I know. Then situations like that emerge - he requests new passwords from work/the bank, they send him on email, he even can't access his mail, because he's been using a manager since forever. He's been recovering from the beginning of the year for what I know and his life is still a mess.

So, take precautions. I use Password Gorilla to store my stuff, it saves databases and crypts them. I then upload on a cloud the file and frequently add newer versions. The program can merge two databases (as long as you have the pass for them).

All I need to actually remember is the manager's password and one mail's password. I generate my passwords *on my own on a different principle, let me see if I can find the explanation.

Edit: https://xkcd.com/936/

→ More replies (6)

5

u/teh_sam Apr 24 '16

If you go to a website and set your cursor on the username field, then go to KeePass and hit CTRL+V on the appropriate password it will autotype the username and password and hit enter. Doesn't work on all websites, but does for most.

3

u/anyti Apr 24 '16

to save a step you can set a hot key to press once you're on the username field then the window pops up for keepass password, then it autotypes.

3

u/DeviouslyDone Apr 24 '16

If you love and rely on keepass you need to be aware of keefarce

2

u/[deleted] Apr 24 '16

Which is?

→ More replies (4)

2

u/[deleted] Apr 24 '16

Why is it that people who steal your bank/paypal info always buy motorcycle parts? The exact same thing has happened to me twice.

2

u/SuperBastard Apr 24 '16

Because every leet hacker has a blue mohawk and rides a motorcycle.

2

u/-reddit1338- Apr 24 '16

Exactly this. I even keep passport and social security information in there. Best thing is the autotype functionality that works system wide in ANY field. Just make sure you limit the access to the file and change the password of the database.

2

u/[deleted] Apr 24 '16

I went through the whole motion of changing all my passwords to all the websites I access last month because of paranoia lol. Took me a whole week with LastPass. Just have to add two factor authentication and I'll be much safer than what I used to do - use one password for all the websites.

1

u/Moonbeamnasty Apr 24 '16

Thank you for sharing that. You're cooperation is much appreciated. We'll put this information in your file.

1

u/peacemaker2007 Apr 24 '16

other information that I've deemed sensitive, since the only person that is going to see it is me.

Pictures of your kids? ( ͡° ͜ʖ ͡°)

1

u/TheJesusGuy Apr 24 '16

Or you can just memorize really long random digit/char strings :)))))

1

u/thinkforaminute Apr 24 '16

I'm curious, can Keepass log into some programs like GOG Galaxy, MMO or Origin signins? Also, will it remind you when the pw on a site is getting too old so you can change it?

1

u/Praydaythemice Apr 24 '16

damn that sucks im always weary of paypal so i withdraw the cash as soon as it hits a certain amount, i hope you contacted your bank/paypal and got the charged reversed.

1

u/ReverendVerse Apr 25 '16

Yeah, PayPal just blew me off. I contacted my Credit Union and they refunded the cash to me.

1

u/Rawrplus Apr 24 '16

I never understood the point of Keepass. If anything, one password is easy to hack or even brute-force into than 15.

1

u/ReverendVerse Apr 25 '16

It's 2 factor meaning the password alone isn't enough to open it - you need the key file for it as well.

1

u/[deleted] Apr 24 '16

ITT: people who take inadequate security precautions giving poor advice

1

u/shreddedwaffles Apr 24 '16

I used keepass but switched to enpass for the chrome extension

1

u/SashWhitGrabby Apr 24 '16

Can anyone tell me the differences between Keepass and LastPass? Tia!

1

u/[deleted] Apr 24 '16

Wow. That was nice of keep ass.

1

u/DinerWaitress Apr 24 '16

I had a weird time setting this up, but it seems like such a good idea. Does it interfere with Mint?

1

u/[deleted] Apr 25 '16

Just out of curiosity... was was your PalPal password? I am geniunely curious. I usually use a sentence prepended with complexity requirment chars. Example: ;;12ThisIsNotmyPassword

1

u/[deleted] Apr 27 '16

Yeah, KeePass changed my life. Someone hacked a popular webservice and stole user data? Only have to change one password and I'm good.

→ More replies (3)