Home News Forum Articles
  Welcome back Join CF
You are here You are here: Home | Forum | Password managers.

You are currently viewing our boards as a guest which gives you limited access to view most of the discussions, articles and other free features. By joining our Virgin Media community you will have full access to all discussions, be able to view and post threads, communicate privately with other members (PM), respond to polls, upload your own images/photos, and access many other special features. Registration is fast, simple and absolutely free so please join our community today.


Welcome to Cable Forum
Go Back   Cable Forum > Computers & IT > Internet Discussion

Password managers.
Reply
 
Thread Tools
Old 03-08-2017, 17:06   #1
RichardCoulter
cf.mega poster
 
Join Date: Jan 2008
Posts: 9,997
RichardCoulter has disabled reputation
Password managers.

After watching something about internet security, they advised upon getting a password manager.

How safe are these?

Is there any evidence of unscrupulous people using these in order to obtain passwords?

Can anyone recommend a good one?

What if the password manager itself gets hacked?

Thanks.
RichardCoulter is offline   Reply With Quote
Advertisement
Old 03-08-2017, 19:13   #2
Paul
Dr Pepper Addict
Cable Forum Team
 
Paul's Avatar
 
Join Date: Oct 2003
Location: Nottingham
Age: 61
Services: Flextel SIP : Sky Mobile : Sky Q TV : VM BB (1000 Mbps) : Aquiss FTTP (330 Mbps)
Posts: 27,615
Paul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered stars
Paul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered stars
Re: Password managers.

I have been testing "Lastpass" for a couple of months, it seems to work ok.
__________________

Baby, I was born this way.
Paul is offline   Reply With Quote
Old 03-08-2017, 19:50   #3
pip08456
Sad Doig Fan!
 
pip08456's Avatar
 
Join Date: Aug 2007
Location: Barry South Wales
Age: 67
Services: With VM for BB 250Mb service.(Deal)
Posts: 11,647
pip08456 has a nice shiny starpip08456 has a nice shiny star
pip08456 has a nice shiny starpip08456 has a nice shiny starpip08456 has a nice shiny starpip08456 has a nice shiny starpip08456 has a nice shiny starpip08456 has a nice shiny starpip08456 has a nice shiny starpip08456 has a nice shiny starpip08456 has a nice shiny starpip08456 has a nice shiny starpip08456 has a nice shiny starpip08456 has a nice shiny starpip08456 has a nice shiny starpip08456 has a nice shiny starpip08456 has a nice shiny starpip08456 has a nice shiny starpip08456 has a nice shiny starpip08456 has a nice shiny starpip08456 has a nice shiny star
Re: Password managers.

Quote:
Originally Posted by Paul M View Post
I have been testing "Lastpass" for a couple of months, it seems to work ok.
I've been using LastPass for a few years now. They got hacked a couple of years ago but due the the encription no-ones passwords were comprimised.

All in all very happy with it.
pip08456 is online now   Reply With Quote
Old 03-08-2017, 19:51   #4
Onramp
Inactive
 
Join Date: Sep 2016
Posts: 210
Onramp will become famous soon enoughOnramp will become famous soon enoughOnramp will become famous soon enough
I would never trust any password manager.
Onramp is offline   Reply With Quote
Old 03-08-2017, 20:27   #5
RichardCoulter
cf.mega poster
 
Join Date: Jan 2008
Posts: 9,997
RichardCoulter has disabled reputation
Re: Password managers.

Thanks for the replies everyone.

Why wouldn't you trust them Infamous, have you had a bad experience with one?
RichardCoulter is offline   Reply With Quote
Old 03-08-2017, 22:01   #6
progers
Pete
 
progers's Avatar
 
Join Date: Jan 2004
Location: Nuneaton
Services: Broadband Up to 100Mb ~ TV Mix & TiVo 1Tb ~ Phone: Talk More Anytime
Posts: 1,056
progers is just so famous around these partsprogers is just so famous around these partsprogers is just so famous around these partsprogers is just so famous around these partsprogers is just so famous around these partsprogers is just so famous around these partsprogers is just so famous around these partsprogers is just so famous around these partsprogers is just so famous around these partsprogers is just so famous around these partsprogers is just so famous around these partsprogers is just so famous around these partsprogers is just so famous around these partsprogers is just so famous around these partsprogers is just so famous around these parts
Re: Password managers.

A lot of password managers store your details on a web server, although they might be encrypted, passwords can still be broken using brute force dictionary methods.

I use Steganos Password Manager which saves the files to your PC which, IMHO, makes it inherently safer
progers is offline   Reply With Quote
Old 04-08-2017, 01:03   #7
Onramp
Inactive
 
Join Date: Sep 2016
Posts: 210
Onramp will become famous soon enoughOnramp will become famous soon enoughOnramp will become famous soon enough
Something feels wrong about providing someone else with your passwords. It is a centralized, externally-managed, more-humans-involved-than-just-you point of failure, which if not accidentally mishandled, could otherwise be deliberately misused.
Onramp is offline   Reply With Quote
Old 04-08-2017, 02:15   #8
SnoopZ
CF Resident Dog
 
SnoopZ's Avatar
 
Join Date: Mar 2005
Posts: 14,225
SnoopZ has a pair of shiny starsSnoopZ has a pair of shiny starsSnoopZ has a pair of shiny starsSnoopZ has a pair of shiny starsSnoopZ has a pair of shiny stars
SnoopZ has a pair of shiny starsSnoopZ has a pair of shiny starsSnoopZ has a pair of shiny starsSnoopZ has a pair of shiny starsSnoopZ has a pair of shiny starsSnoopZ has a pair of shiny starsSnoopZ has a pair of shiny starsSnoopZ has a pair of shiny stars
Re: Password managers.

Last Pass is awesome, i use it on a PC.
__________________
PSN: Snoopzster
SnoopZ is offline   Reply With Quote
Old 04-08-2017, 14:09   #9
RichardCoulter
cf.mega poster
 
Join Date: Jan 2008
Posts: 9,997
RichardCoulter has disabled reputation
Re: Password managers.

Quote:
Originally Posted by RichardCoulter View Post
Thanks for the replies everyone.

Why wouldn't you trust them Onramp, have you had a bad experience with one?
Corrected (spellcheck).
RichardCoulter is offline   Reply With Quote
Old 04-08-2017, 15:32   #10
v0id
[CENSORED]
 
v0id's Avatar
 
Join Date: Apr 2005
Location: Wolverhampton
Age: 45
Services: Virginmedia - BB:250 TV:Mix TiVo v6 Phone:Talk Weekends w/anon reject
Posts: 4,217
v0id has a bronzed appealv0id has a bronzed appeal
v0id has a bronzed appealv0id has a bronzed appealv0id has a bronzed appealv0id has a bronzed appealv0id has a bronzed appealv0id has a bronzed appealv0id has a bronzed appealv0id has a bronzed appealv0id has a bronzed appealv0id has a bronzed appealv0id has a bronzed appealv0id has a bronzed appealv0id has a bronzed appealv0id has a bronzed appeal
Re: Password managers.

Quote:
Originally Posted by SnoopZ View Post
Last Pass is awesome, i use it on a PC.
I use it on both PC and mobile, since you no longer need premium to do so
__________________
Help save the world from loosers

v0id is offline   Reply With Quote
Old 04-08-2017, 15:37   #11
Hom3r
Mum 15/08/46 - 30/09/20
 
Hom3r's Avatar
 
Join Date: Mar 2004
Location: Galactic Sector ZZ9 Plural Z Alpha, www.daves-world.co.uk. A secret Moonbase (shh don't tell anybody)
Age: 55
Services: 1 V6, 2x1TB TiVo, SH3. Samsung Galaxy Note 10+ 5G, Ton's of Smart Home stuff, & Cuddy Toy
Posts: 16,864
Hom3r has a pair of shiny starsHom3r has a pair of shiny starsHom3r has a pair of shiny starsHom3r has a pair of shiny stars
Hom3r has a pair of shiny stars
Re: Password managers.

I use lastpass on my mobile, which requires my fingerprint.

TBH in your own home you could just write them down
__________________
STAY AT HOME: I found out that mum will never walk again as the coronavirus attacked her nervous system. She died on September 30th, wearing a mask and she still might be alive today.
Hom3r is offline   Reply With Quote
Old 04-08-2017, 20:27   #12
Paul
Dr Pepper Addict
Cable Forum Team
 
Paul's Avatar
 
Join Date: Oct 2003
Location: Nottingham
Age: 61
Services: Flextel SIP : Sky Mobile : Sky Q TV : VM BB (1000 Mbps) : Aquiss FTTP (330 Mbps)
Posts: 27,615
Paul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered stars
Paul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered stars
Re: Password managers.

Quote:
Originally Posted by Hom3r View Post
TBH in your own home you could just write them down
Lastpass auto fills them, and auto logs you in.
__________________

Baby, I was born this way.
Paul is offline   Reply With Quote
Old 05-08-2017, 18:30   #13
Qtx
CF's Worst Nightmare
 
Join Date: May 2012
Location: Probably outside the M25
Services: Sky Fibre Unlimited 40/10
Posts: 3,473
Qtx has a bronzed appealQtx has a bronzed appeal
Qtx has a bronzed appealQtx has a bronzed appealQtx has a bronzed appealQtx has a bronzed appealQtx has a bronzed appealQtx has a bronzed appealQtx has a bronzed appealQtx has a bronzed appealQtx has a bronzed appealQtx has a bronzed appealQtx has a bronzed appealQtx has a bronzed appealQtx has a bronzed appealQtx has a bronzed appealQtx has a bronzed appealQtx has a bronzed appealQtx has a bronzed appealQtx has a bronzed appealQtx has a bronzed appealQtx has a bronzed appeal
Re: Password managers.

Quote:
Originally Posted by pip08456 View Post
I've been using LastPass for a few years now. They got hacked a couple of years ago but due the the encription no-ones passwords were comprimised.


They got hacked at one point and encrypted passwords stolen. That was probably less of an issue than:

1) the problems with their browser extensions (which fill in the passwords for you) that actually meant anyone running a website could completely pwn your computer. Remote code execution.

2) again an extension/addon issue which allowed any website to read your unencrypted password for any site they wanted. Basically it tricked the addon in to thinking you was on the site the password was for.

Both extremely bad issues and as with ANY software, it's unknown if there are other issues waiting to be found.

In reply to original poster....TL;DR Use Lastpass or Keepass2/KeepassX. Lastpass has prettiest interface and less hassle auto password entry. Keepass has not such a great interface and the way it inputs passwords is a bit of a hack on windows if I remember rightly. might not be everyones cup of tea. Keepass you can keep locally off the cloud if you want or sync to something like dropbox or manually if you want to use the passwords elsewhere too. Ignore 1Password.

At least having different passwords for different sites is a good start but you should let the password manager generate a secure password for you.
I'm paranoid through 'being involved in security' and penetrated enough systems and decrypted enough databases which has scared me enough to never want to store anything on the cloud, so would never use Lastpass, but for the average person it's an ok choice. I would recommend it to family as an easy choice, if I had not set them up other options.

Saying all that about LastPass...the other password managers, especially ones where your passwords are stored locally on your computer have another issues. Once you enter your master password to decrypt your password database, the decrypted passwords are in memory. Even though some try and make it difficult to just read the passwords straight from memory, it can be done and there are public/private tools to do so.

You already need to be infected by something to do that though. Whereas RAT's or traditional malware may have keyloggers or read your browser when you login to get passwords for the sites you visit, having a password manager open could potentially mean someone could read the memory and get ALL your passwords, even for sites you have not visited since infection. The chances of this happening are slim. Unless you are a journalist or something that the NSA/GCHQ's of the world are targeting, you shouldn't really worry. A determined hacker targeting you for whatever reason and is aware enough to read the process's, spot the password manager and then know about the tools to read the memory, is possible but again slim.

There is more of a chance that the sites you visit will get compromised and your username/passwords stolen from those, than your password manager.

Last edited by Qtx; 05-08-2017 at 19:14.
Qtx is offline   Reply With Quote
Old 06-08-2017, 07:41   #14
Matthew
cf.mega poster
 
Join Date: Jul 2003
Location: Lincolnshire
Age: 35
Posts: 2,028
Matthew has reached the bronze age
Matthew has reached the bronze ageMatthew has reached the bronze ageMatthew has reached the bronze ageMatthew has reached the bronze ageMatthew has reached the bronze ageMatthew has reached the bronze age
Re: Password managers.

I use Last Pass and even bought the next one up so I can use it with the app on my mobile. Yes there is some risk with it all but its mainly forums and other none important sites I have on there, all the important ones either have a different password I know or I use 2 factor like I do to even access my last pass.
__________________
Matt
Matthew is offline   Reply With Quote
Old 06-08-2017, 10:24   #15
heero_yuy
Perfect Soldier
 
heero_yuy's Avatar
 
Join Date: Mar 2009
Location: Worthing West Sussex
Age: 66
Services: VM 500M SH3 thingy in modem mode XL TV V6 Sony Bravia smart TV and M phone
Posts: 10,966
heero_yuy is seeing silvered starsheero_yuy is seeing silvered starsheero_yuy is seeing silvered starsheero_yuy is seeing silvered stars
heero_yuy is seeing silvered starsheero_yuy is seeing silvered starsheero_yuy is seeing silvered starsheero_yuy is seeing silvered starsheero_yuy is seeing silvered starsheero_yuy is seeing silvered starsheero_yuy is seeing silvered starsheero_yuy is seeing silvered starsheero_yuy is seeing silvered starsheero_yuy is seeing silvered starsheero_yuy is seeing silvered starsheero_yuy is seeing silvered starsheero_yuy is seeing silvered starsheero_yuy is seeing silvered starsheero_yuy is seeing silvered starsheero_yuy is seeing silvered stars
Re: Password managers.

I use the manager that's built into Firefox. The passwords are stored locally and can be protected with a master password.

I've not heard that it's ever been compromised but anything is possible.
__________________
History is much like an endless waltz: The three beats of war, peace and revolution continue on forever.
However history will change with my coronation - Mariemaia Khushrenada
heero_yuy is offline   Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +1. The time now is 19:08.


Server: osmium.zmnt.uk
Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2024, vBulletin Solutions Inc.