Live data from Hacker News

Ask HN: How do you manage your passwords?

news.ycombinator.com

21–30 of 92 posts

Re: Ask HN: How do you manage your passwords?

#21
post #2

I use lastpass. Never tried any other password manager. I don't mind logging into it. On my phone I can swipe my thumb. The only thing I don't like is having to type out the long random passwords on non-physical-keyboards - like setting up a roku to connect to amazon play and spending an extra 15 clicks switching case/keyboard. How often do you have to log into it? Is it specific to a device?

+1 for lastpass. On it for now 4 years, they've gotten more aggressive on development as the market grew but still simple as the first time I've used it.

Re: Ask HN: How do you manage your passwords?

#22
post #2

I use lastpass. Never tried any other password manager. I don't mind logging into it. On my phone I can swipe my thumb. The only thing I don't like is having to type out the long random passwords on non-physical-keyboards - like setting up a roku to connect to amazon play and spending an extra 15 clicks switching case/keyboard. How often do you have to log into it? Is it specific to a device?

I started using Lastpass when I switched jobs and the company I moved to used it. The ability to share logins with people/groups without actually exposing the password is wonderful in the corporate setting, as it makes revoking a group of passwords (think company-level social media accounts) simple and worryfree.

It works well enough to have convinced me to buy Premium on my personal account.

Re: Ask HN: How do you manage your passwords?

#25
post #10

keepass. I don't trust a service to store my passwords. I use a key file and a passphrase to secure my keepass database. The database is stored on dropbox, the keyfile is stored elsewhere.

Same here. KeePass2 on Linux, KeePassX on OSX, and KeePassDroid.

I prefer MacPass over KeePassX, because it support Keepass2 files by default - KeePassX only does in the non-stable version. That's the only annoyance with Keepass: it has two non-compatible file types and you need to stick with one (and hence the supporting software).

Re: Ask HN: How do you manage your passwords?

#26
I use a shell alias:

alias getpass='_getpass() { _g=$(printf "sauce%s" "${*}" | md5sum | openssl enc -base64 | cut -c1-16); printf "%s" "${_g}"|xclip -selection clipboard 2>/dev/null|| printf "%s\\n" "${_g}"; }; _getpass'

like this:

$ getpass mail@domain.lts

$ getpass user@domain.lts #for ssh logins

Re: Ask HN: How do you manage your passwords?

#29
I use an internal (in my head) algorithm that bases (in part) on the domain name of the site I log into. For example, ycombinator.com could be z4O9999asdf Which represents

[1 letter after domain][c is 3rd letter of alphabet][numeric letter representation][last 4 SSN][pseudo counter] It might not be as high tech as software, but I think it offers a reasonable security / ease of use combo.

Note: This is nowhere near my algorithm and tokens have been made up for the purposes of this example.

Re: Ask HN: How do you manage your passwords?

#30
> logging in repeatedly

Repeatedly? Only at my work do I ever have to retype my password. My home is logged in and my phone has a pin.

What repeatedly is driving you away?

PS Lastpass is best in class for me

EDIT: I never memorize my passwords for sites. After having friends who were penetration testers I never do anything half-way secure. I actually can't wait till I have some kind of rfid of some sort to access lastpass.

Post reply on HN