• Hi Guest - Come check out all of the new CP Merch Shop! Now you can support CigarPass buy purchasing hats, apparel, and more...
    Click here to visit! here...

Password Managers

  • Thread starter Thread starter MX
  • Start date Start date

MX

Some may call me....Tim?!?
Joined
Jun 5, 2007
Messages
5,395
Location
Monument, Colorado
First Name
Tim
Anyone using them?
Looking to move me and my wife over to one. currently order of consideration:
1. Nordpass
2, 1Password

Anyone who has made the move, how hard was it, and how hard is it to maintain in your daily life?

Tim
 
I've been using LastPass for over 10 years now. Been great. I also use KeyPass and have used it with a Web Server Front End as well.

Are you looking for Security or ease of use mainly? Anything truly Secure should not be Internet Facing.
 
I have been using Sticky Password for years. I have one account for me and my wife, with well over 1000 passwords saved.
You can check Stack Social, I purchased a lifetime license for under $50, and they run the special every so often.
I have it installed on 4 computers, my wife's tablet, our phones, and on a secure USB drive for crypto accounts.
 
well, a bit of both, for my wife it needs to be user friendly
I do know I want it to support 2/MFA and 0 knowledge architecture.

My issue is, I do a ton of work on a gov issued laptop, and cant install extensions or aps on the device.
So being able to work that issue is also key
 
I've used LassPass for at least 5+ years. I Love it!!

Edit: The only time I regret using it is when i have to type a password with my tv remote :)
I used LastPass for a while and switched to BitWarden, though I no longer recall why. But, I've been happy with it on two laptops and my phone.

And I have the same issue with having to type a password with a remote control! LOL
 
A) I am not a tech wizard
B) I know a little bit about encryption from my military days and after
C) When something works I don't tend to change it

So that said, I have used Keepass for probably 15 years. What I like.

A) Open source code, so I know people are beating on it all the time, so if it's been hacked, I'm confident I will know.
B) Small code, light on resource use.
C) Password file always remains encrypted on your hard drive, phone, iPad, whatever. The unencrypted view only exists in the application view. When you close that, it's gone. No image of the uneccrypted file exists.

I don't know if the other stuff does that, they may. the UI is understandable, but not too pretty, but IDGAF about pretty. I like secure.


Other things I use are


and

 
well, a bit of both, for my wife it needs to be user friendly
I do know I want it to support 2/MFA and 0 knowledge architecture.

My issue is, I do a ton of work on a gov issued laptop, and cant install extensions or aps on the device.
So being able to work that issue is also key
So LastPass does allow you to log into a web site itself. Full disclosure, they have had a breach in the last year or two. So if you are thinking about using it for any Work related accounts, I would advise against that.

Edit to add: What ever you do decide to use, if you are storing Work Accounts, confirm with you company's Security Team that it would be allowed. Especially since you mention Government work; things like this could seem negligible, but if a system gets compromised you could be looking at harsh repercussions. Even if you are not at fault, ensuing audits could bring the hammer down hard as a scapegoat or an example.
 
Last edited:
So LastPass does allow you to log into a web site itself. Full disclosure, they have had a breach in the last year or two. So if you are thinking about using it for any Work related accounts, I would advise against that.

Edit to add: What ever you do decide to use, if you are storing Work Accounts, confirm with you company's Security Team that it would be allowed. Especially since you mention Government work; things like this could seem negligible, but if a system gets compromised you could be looking at harsh repercussions. Even if you are not at fault, ensuing audits could bring the hammer down hard as a scapegoat or an example.
I agree with this, however passwords are stored using a zero knowledge encryption. Basically that means that Lass Pass themselves can't even view your passwords or unencrypt it. They would need your Master Password to unencrypt it. Even though there was a breach of their backup servers (not production), no passwords were able to be decrypted.
 
I will not be storing any work-related details, but I do access personal password protected sites via my work computer, that is the concern
 
I will not be storing any work-related details, but I do access personal password protected sites via my work computer, that is the concern
You can access those via a website.
 
  • Like
Reactions: MX
Sorry cant help with that as Im still a paper guy with a list in my planner but I do use this to create passphrases.


There is a dice rolling app you can get on your phone if you dont want to do it analog.

At work I have to have strong PWs and change them on a regular bases. The phases are easier to remember and using the dice makes it easier for me since I suck at coming up with PWs.

HT
 
  • Like
Reactions: MX
Top