SoylentNews is people
SoylentNews
A security consulting firm released a report on the safety of password managers. A non-geek, summarized version is also available at the Washington Post. (Summarized graphic of results.)
The password managers included in the study were 1Password 4, 1Password 7, Dashlane, KeePass, LastPass. Unfortunately, the testing was limited to Win10 even if the password managers were available on other platforms. They all had some flaws, but as reported, you should still use one. They were all tested for encryption method on the database, accessibility of the master password and keys in memory while unlocked, and the master password and keys in memory while locked.
All were evaluated to have adequate encryption on the file. 1Password 4 (which actually had better memory security than 1Password 7,) was best at keeping individual passwords safe in memory; while KeePass was best at keeping the Master Password safe in the memory tests (although Dashlane did the same while it while in a locked state.)
(Score: 2) by Gaaark on Thursday February 21 2019, @09:35PM (2 children)
4 long words, not going together in a common way ( no chocolateicecreamisgood)
Site identifier
Stick in a number/character
Mis-spell a word
Make the 4 words as long as possible
My passwords are often 25-30 characters long, each one unique.
IMPORTANT ones I do not trust to external systems (someone else's server that can be hacked) except the site itself...ie, a bank. If the bank is hacked, I'm screwed but the bank will reimburse me if it knows what is good for it.
I do keep a little black book, but it is not beside my computer: my computer is stolen, good luck to you trying to hack me.
--- Please remind me if I haven't been civil to you: I'm channeling MDC. ---Gaaark 2.0 ---
(Score: 2) by NotSanguine on Thursday February 21 2019, @10:35PM
Those are good suggestions.
I use lines from poems/adages/songs, etc. and modify them to make them unrecognizable to dictionary attacks. I also include punctuation and capitalization.
For example:
In the drone where I what burned.
or
I've got blings to dew and polemics to cheap.
And I keep them in the best password manager I can find. My brain. It's not open-source, but it is relatively unhackable without a million dollar cluster for decryption [xkcd.com]
The key is that they're long, not easily guessed via a dictionary attack (even with a phrase dictionary) and easy to remember.
What more could one want?
No, no, you're not thinking; you're just being logical. --Niels Bohr
(Score: 2) by pipedwho on Thursday February 21 2019, @10:42PM
Only 4 words long?
Mine are 7 words long and 6 characters around. I vary technique to avoid it being too predictable. Tantric breathwork is important too.
Oh wait. Were we talking about passwords?