password app?

Keepass is Freeware and really ver goo. But it is a windows application. A compatible Mac tool is KyPass which uses the same password files which is important if you switch between win and Mac.

On the Mac, 1password is the best. It has windows, iPhone and android versions which sync nicely. But only the Mac and iPhone versions are truly good
 
On the Mac and iOS devices: 1Password

Why:
- Sync's your passwords across all your devices
- Password generator so you have have a good unique password on each site
- Integrates very nicely with browsers on the computer
- Also can store your other sensitive notes with good encryption.

I've been using it for some time. It's terrific.
 
When I used windows, I thought Roboform was the best.

Been on Mac for the last 6 years and I like 1Password best now...syncs all macs and iOS devices so you aren't running around to see which one is the current password. It is now available for windows also.

Tom
 
Aren't these places that can hold information like this can be stolen/hacked? Do you know what else is on the server you are putting this info on to or do you think you have a server that is just for you? Some large retailers and others have been hacked, why not where you store info. like this?

I don't use many web sites anymore; therefore I can remember the passwords I use. For some of my stuff I use a fob before gaining access.

If I needed a place for reference I think I would use a flash drive that I could keep in a safe place.



Just my way of thinking.
 
Aren't these places that can hold information like this can be stolen/hacked?

Except for very questionable software and services that do remote decoding, there will never be a unencrypted password out on the server - the database is shared for downloading by your computers and devices, but decoded locally on each of them.

What with the advances in cryptanalysis, it is hard to define a password that will be safe within a few years - so using cloud served passwords protected by nothing by a single master password is at least a future risk.

The recommendation when using Keepass with a cloud-served database is to combine as strong a master password as you can memorize with a key file (that is, another Kbit or two of password, beyond the scope you could possibly remember) which is never shared across the cloud. Having to crack both puts the complexity of brute-force attacks into a region where even the NSA would need a couple of decades (if computers continue to grow faster at the current pace) to break that database.

Of course, there is always the risk that the device itself or other software on the device, are compromised, and dump the screen or memory to an intruder while the database is decoded - particularly vulnerable information should always rely on a second layer of security (like two-factor authentication).
 
Back
Top Bottom