Live data from Hacker News

Ask HN: How do you manage your passwords?

news.ycombinator.com

41–50 of 92 posts

Re: Ask HN: How do you manage your passwords?

#41
post #5

I use and recommend 1Password.

I also recommend this. I use it on my phone too. The downside is it's not targeted towards linux users. That said you can hack together access via Dropbox if you need access to your vault on linux.

Is there a writeup on how to access it via linux?

Re: Ask HN: How do you manage your passwords?

#42
post #5

I use and recommend 1Password.

I also recommend this. I use it on my phone too. The downside is it's not targeted towards linux users. That said you can hack together access via Dropbox if you need access to your vault on linux.

Is there a writeup on how to access it via linux?

Re: Ask HN: How do you manage your passwords?

#43
post #8

1password on iOS/OSX. There was a big discount on both a while back and I jumped on it. Even today, I'd consider paying for it. I've tried all the open source options, none of them worked nearly as well as 1pwd.

1password on iOS/OSX + on windows at work. It's got a great feature here you can have different 'vaults' for different sets of passwords - I have one personal, one for work and one for home utilities that I can share with the family.

Initially the $50 was painful, but I've since happily paid for all the upgrades and for family members license' too - encouraging good password hygiene!

Re: Ask HN: How do you manage your passwords?

#44
I use a secret scheme that only I know. It works like this - I have one single long complex "base" password, which is no problem for me to remember, which has letters, numbers, caps, and symbols so all password checkers are happy. Then, for every site I change that password using my secret scheme. I won't say what mine is, but an example is that I change the 3rd character to match the 3rd character of the URL, and I add a character to the end equal to the URL's first character, but shifted right one column on the keyboard (V becomes B for example).

Basically it's one base password and one repeating scheme, that gives me a unique complex password on every site, that's easy to remember, and doesn't require any special software to maintain!

Re: Ask HN: How do you manage your passwords?

#46
post #34
post #8

1password on iOS/OSX. There was a big discount on both a while back and I jumped on it. Even today, I'd consider paying for it. I've tried all the open source options, none of them worked nearly as well as 1pwd.

Hands down the best fifty bucks I've ever spent.

Used to use PasswordBox but then switched to 1Password - I'm much happier. Unlike my experience with PasswordBox, I can keep my data on my cloud and can export any/all my passwords. However, my 1password trial has expired and I rather not pay $50.

Re: Ask HN: How do you manage your passwords?

#47
post #2

I use lastpass. Never tried any other password manager. I don't mind logging into it. On my phone I can swipe my thumb. The only thing I don't like is having to type out the long random passwords on non-physical-keyboards - like setting up a roku to connect to amazon play and spending an extra 15 clicks switching case/keyboard. How often do you have to log into it? Is it specific to a device?

I started using Lastpass when I switched jobs and the company I moved to used it. The ability to share logins with people/groups without actually exposing the password is wonderful in the corporate setting, as it makes revoking a group of passwords (think company-level social media accounts) simple and worryfree. It works well enough to have convinced me to buy Premium on my personal account.

> the ability to share logins with people/groups without actually exposing the password is wonderful in the corporate setting

I haven't tried this for a long time, but the last time someone shared a password with me through LastPass, I was able to easily grab the plaintext just by watching the network traffic with dev tools. So this feature seems questionable to me.

Re: Ask HN: How do you manage your passwords?

#48
post #33

I use a shell alias: alias getpass='_getpass() { _g=$(printf "sauce%s" "${*}" | md5sum | openssl enc -base64 | cut -c1-16); printf "%s" "${_g}"|xclip -selection clipboard 2>/dev/null|| printf "%s\\n" "${_g}"; }; _getpass' like this: $ getpass mail@domain.lts $ getpass user@domain.lts #for ssh logins

Seems like that would be pretty annoying for passwords that must be changed periodically (or even just occasionally).

yep, it doesn't allow changing passwords because of its fixed nature. I use it for my personal needs

Re: Ask HN: How do you manage your passwords?

#49
post #14

Keepass (Win/Linux) and MacPass (Mac). Certainly not as polished as 1password, but it's Open Source and cross platform. And it has plugins for FF and Chrome for auto entry on websites (Win only so far). What I often use and enjoy a lot is it's import and export functionality. For example if I want to add URLs to get auto completion working and I want to do that in batch, I export a CSV, edit this in LibreOffice and i…

The Achilles heel for Keepass for me (and what ultimately sent me to LastPass) was that there wasn't any way to use it on a Chromebook conveniently (yes, there's crouton, but I don't find that acceptable).

( It would be cool if something like Keepass could be built around smartcards or these new-fangled U2F dongles... I've be come quite a convert to the smartcard approach after setting up my yubikey to work as an OpenPGP smartcard )

Post reply on HN