Comments on: Why You Need a Password Manager

By: ThiNg

ThiNg — Tue, 08 Sep 2009 22:00:16 +0000

I use an encryption application called TrueCrypt. It’s free and it creates super strong encrypted containers (higher than top-secret US government encryption if you want to!). The containers can even be hidden inside of other containers. So I did this.

I bought a 8GB USB key ($20) and encrypted the entire key with a simple password (I use that to transfer files in case I ever lose the key). In there, I created a new encrypted folder with a much stronger password. That contains simple notepad files of all my passwords etc. Cost me nothing at all!

By: Mary

Mary — Thu, 03 Sep 2009 09:56:50 +0000

I use Billeo to manage my passwords. It’s a great password manager and a real time saver. It securely saves my passwords and I can easily edit or delete them anytime. The tool is VeriSign secured and TRUSTe certified, so no security issues.

By: Jonathan

Jonathan — Mon, 31 Aug 2009 11:59:06 +0000

Secret Server is another option – it is free for individuals (but scales to enterprise use). It is web-based and also has an iPhone interface.

By: GadgetBoy

GadgetBoy — Fri, 28 Aug 2009 01:05:25 +0000

@A Marino

Keepass is not an online application – it stores your passwords locally on your PC.

Just an FYI

By: A Marino

A Marino — Thu, 27 Aug 2009 20:04:55 +0000

I personally don’t trust putting that kind of information online.

I have index cards that are divided into subjects such as banks, utilities, credit cards, company passwords and EFTPS info.

For ordinary subjects, every card is alphabitized and I feel good about this system.

By: Randy King

Randy King — Thu, 27 Aug 2009 20:02:05 +0000

I would suggest several different ways of managing multiple hard-to-guess passwords:

Desktop software: 1Password, Keepass, SignupShield, Roboform

USB drive: Ironkey, ID Vault

Web app: Passpack, Lastpass, Mitto

Standalone device: Mandylion, Atek Logio

Each has advantages and disadvantages in terms of security, convenience, and portability.

By: baselle

baselle — Thu, 27 Aug 2009 16:44:45 +0000

Aren’t you assuming that passwords are static? More and more sites that I access ask you (force you) to change your password every six months or so. Also, I remember that Gator (primitive password manager) used to hook you on the convenience of a manager, then try to sell you crap. Ever since then, I’ve been wary.

I’ll have to check out that Keepass/Portable Apps application. Thx!

By: Monkey Mama

Monkey Mama — Thu, 27 Aug 2009 13:20:27 +0000

I keep a record, and no doubt I have a lot of accounts. But is it really that painful to reset a password? We changed e-mails last year and I had to call about 5 places to reset my password or ask for my login. Each call took like a minute. Guess it depends on the place.

On the flip side, my dad had a stroke and forgot all his passwords. Then again, that was the least of his worries – it wasn’t a biggie.

A very good reason for a password manager is in case of death. For a spouse, in particular.

By: Carol

Carol — Thu, 27 Aug 2009 12:48:58 +0000

I have always kept a password record, and once in a blue moon I need to refer to it. Credit cards and bank accounts are easier to track online (especially when you have concerns about theft).

Another reason to keep a good account of your passwords and logins: a friend of mine had his debit card information stolen. He needed to change his card information for everything he had auto pay on (which was everything except for his rent!). He had a difficult time trying to make the changes because he didn’t remember any of his logins or passwords. He spent hours on the phone with customer service reps trying to get things straightened out, and ended up with a few late fees for accounts he had forgotten. I talked him into keeping a record of his passwords and he thought that was a smart idea…and has been doing it since! He’s also noted “autopay” on the ones that are drafted from his bank account just in case he needs to change things around again.

By: GadgetBoy

GadgetBoy — Thu, 27 Aug 2009 10:41:59 +0000

I would suggest you check out Keepass (http://keepass.com). It is part of the PortableApps (http://portableapps.com/) application and can be downloaded separately or as part of the suite. Originally, I used the same password for every site that I visited. I have since realized how dumb that was… I installed it all on a memory stick and carry it around with me. I have a different 12-16 random character password for every website I visit. I keep a copy of the database on my laptop and a backup on a disk.

Now, wherever I am I can log in to a PC and check any account. Even better, the PortableApps suite comes with a virus scanner so I can scan the unknown PC for any potential viruses or key loggers to ensure my browsing will be safe.

Very good article…