Live data from Hacker News

Ask HN: Where are you storing your passwords?

news.ycombinator.com

11–20 of 20 posts

Re: Ask HN: Where are you storing your passwords?

#11
post #6

In my head =D At first I used one password for everything. Then two, but that was a accident (ie: I forgot to change one default auto-password but got so used to it that I started to use in other places). Then the first one was cracked. I changed passwords in lots of places, and started to use 3 passwords total. As this kept balooning, I decided to instead create rules for my passwords (rules that only make sense to…

Did you find out who cracked it? And how did you find out? Just curious if you were targeted specifically.

Re: Ask HN: Where are you storing your passwords?

#12
post #2

I use KeePass ( http://keepass.info/ ) to manage all of my passwords. From their website: KeePass is a free open source password manager, which helps you to manage your passwords in a secure way. You can put all your passwords in one database, which is locked with one master key or a key file. So you only have to remember one single master password or select the key file to unlock the whole database. The databases ar…

Same, but I use http://www.keepassx.org/ as it works better with linux.

Re: Ask HN: Where are you storing your passwords?

#13
post #9

I'm surprised LastPass hasn't been mentioned yet. I've had nothing but good experiences with the company and the product itself. It is primarily a browser plugin for storing web passwords and sensitive information but you can also use the secure notes feature to store passwords for other applications. There are several multi-factor authentication options available as well.

I use LastPass with the Google 2-factor authentication app. I also keep some secure notes in it.

Re: Ask HN: Where are you storing your passwords?

#14
post #6

In my head =D At first I used one password for everything. Then two, but that was a accident (ie: I forgot to change one default auto-password but got so used to it that I started to use in other places). Then the first one was cracked. I changed passwords in lots of places, and started to use 3 passwords total. As this kept balooning, I decided to instead create rules for my passwords (rules that only make sense to…

Did you find out who cracked it? And how did you find out? Just curious if you were targeted specifically.

I had a password exposed via a compromise/dump of the perlmonks.org website a year or two ago.

That didn't bother me since I use per-site passwords, stored in a pwsafe database. But it is an example of sites compromising passwords.

Re: Ask HN: Where are you storing your passwords?

#15
post #10

1Password on OSX is one of the only blockers from using Linux as my primary desktop right now- I've tried LastPass, KeepPass, and others, but haven't found anything that works as well ;(

Can you elaborate on how it's better than LastPass, if you can remember the differences? I'm using LP at the moment as 1Password is considerably more expensive but I'd be interested to know in what sense it might be worth the extra?

Re: Ask HN: Where are you storing your passwords?

#17
I use Keychain on Mac OS X to store passwords automatically and I make password protected notes for sites or apps where passwords are not recommended correctly.

I make general rules for passwords and follow those. I also use poor, easy memorisable passwords for various sites that I don't deem important but require a login and password.

Re: Ask HN: Where are you storing your passwords?

#19
post #10

1Password on OSX is one of the only blockers from using Linux as my primary desktop right now- I've tried LastPass, KeepPass, and others, but haven't found anything that works as well ;(

I start using 1password a month ago (half price while the Macworld sales). But I only use it for important services like email, Dropbox, because I am too lazy typing the master password.

Re: Ask HN: Where are you storing your passwords?

#20
I have a random 8-letter password memorized (includes uppercase and numbers), but I prepend the first 2 characters of the md5-hash of the service's/website's name. That way I just have to quickly open a terminal whenever I forget a password.

I recently learned about YPassword and I think it's a similar idea.

Post reply on HN