[Micronet] password manager?

classic Classic list List threaded Threaded
10 messages Options
Reply | Threaded
Open this post in threaded view
|

[Micronet] password manager?

Jennifer Teverbaugh
Hi Micronet,

I am finding myself using more and more passwords and having trouble
keeping them all straight in my little notebook. :)  What is everyone
using to manage their passwords?  I am considering KeePass wanted to get
some input from this group before diving in.

Thanks!
Jennifer Teverbaugh

--
Jennifer Teverbaugh(Davidson)
Technical Support
Department of Bioengineering
University of California, Berkeley
306F Stanley Hall, MC 1762
Berkeley, CA 94720
Office: (510) 642-5833
Fax: (510) 642-5835
http://bioeng.berkeley.edu
note new email address: [hidden email]


 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.
Reply | Threaded
Open this post in threaded view
|

Re: [Micronet] password manager?

Jon Johnsen
Jennifer,

Password protected file with the information?

http://www.positscience.com/ ?

Problem with the little notebook is the possibility of losing it
totally, or someone else finding it!

And from my personal experience, the ability to remember multiple
account names and passwords definitely does not improve with age . . . .

Jon Johnsen
Information Systems Office
433 University Hall
School of Public Health, UC Berkeley
510 643-4357


On 4/28/2011 11:04 AM, Jennifer Teverbaugh wrote:

> Hi Micronet,
>
> I am finding myself using more and more passwords and having trouble
> keeping them all straight in my little notebook. :)  What is everyone
> using to manage their passwords?  I am considering KeePass wanted to get
> some input from this group before diving in.
>
> Thanks!
> Jennifer Teverbaugh
>

 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.
Reply | Threaded
Open this post in threaded view
|

Re: [Micronet] password manager?

Michelle Ziegmann
In reply to this post by Jennifer Teverbaugh
I've been very happy with LastPass, which I started using a few months
ago. I read several excellent reviews that gave me confidence trusting
them. I love that it syncs across all of my computers/devices.

Michelle Ziegmann

On 4/28/2011 11:04 AM, Jennifer Teverbaugh wrote:

> Hi Micronet,
>
> I am finding myself using more and more passwords and having trouble
> keeping them all straight in my little notebook. :)  What is everyone
> using to manage their passwords?  I am considering KeePass wanted to get
> some input from this group before diving in.
>
> Thanks!
> Jennifer Teverbaugh
>

--
Michelle Ziegmann
===========================
Electronic Communications Specialist
University of California Berkeley
Educational Technology Services


 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.
Reply | Threaded
Open this post in threaded view
|

Re: [Micronet] password manager?

Micah Priddy
We use passwordsafe http://passwordsafe.sourceforge.net/ .  Its free,
secure, and seems to work great.

-----Original Message-----
From: [hidden email]
[mailto:[hidden email]] On Behalf Of Michelle
Ziegmann
Sent: Thursday, April 28, 2011 11:14 AM
To: [hidden email]
Subject: Re: [Micronet] password manager?

I've been very happy with LastPass, which I started using a few months
ago. I read several excellent reviews that gave me confidence trusting
them. I love that it syncs across all of my computers/devices.

Michelle Ziegmann

On 4/28/2011 11:04 AM, Jennifer Teverbaugh wrote:

> Hi Micronet,
>
> I am finding myself using more and more passwords and having trouble
> keeping them all straight in my little notebook. :)  What is everyone
> using to manage their passwords?  I am considering KeePass wanted to
> get some input from this group before diving in.
>
> Thanks!
> Jennifer Teverbaugh
>

--
Michelle Ziegmann
===========================
Electronic Communications Specialist
University of California Berkeley
Educational Technology Services


 
------------------------------------------------------------------------
-
The following was automatically added to this message by the list
server:

To learn more about Micronet, including how to subscribe to or
unsubscribe from its mailing list and how to find out about upcoming
meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable,
and the list's archives can be browsed and searched on the Internet.
This means these messages can be viewed by (among others) your bosses,
prospective employers, and people who have known you in the past.

 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.
Reply | Threaded
Open this post in threaded view
|

Re: [Micronet] password manager?

Scot Hacker
In reply to this post by Jennifer Teverbaugh
On Apr 28, 2011, at 11:04 AM, Jennifer Teverbaugh wrote:

> Hi Micronet,
>
> I am finding myself using more and more passwords and having trouble
> keeping them all straight in my little notebook. :)  What is everyone
> using to manage their passwords?  I am considering KeePass wanted to get
> some input from this group before diving in.


I gave a presentation to the webnet group on this topic just a couple of weeks ago. Short version:

- You need very strong passwords
- You have lots of passwords
- You don't want to re-use passwords between services
- You have multiple computers (and maybe smartphones)
- You want to be able to submit those long/strong passwords through your browser easily

I now consider a good password management utility a necessity, not a luxury. I've settled on 1Password, which is identical on Mac, Windows, iPhone and Android.

http://agilewebsolutions.com/onepassword

Includes plugins for all the major browsers. The rub is that once you have a good password management system up and running, you become totally dependent on it, because it's not about your memory anymore. The solution is to have the encrypted password database stored in the cloud so your clients stay in sync. 1Password supports storage of its password db on DropBox. The combination of the two is fantastic - the whole experience is seamless, even if you've got hundreds of ultra-strength passwords to keep track of.

1Password also has special sections for storing software licenses, credit card info, free-form notes, etc. All taggable and searchable.

Of course it's on you to make sure the master password that unlocks it all is very strong. And yes, if you forget the master password that unlocks it all, your life is over :)

./s


--
Scot Hacker, Webmaster
Knight Digital Media Center
UC Berkeley Graduate School of Journalism
http://kdmc.berkeley.edu
http://twitter.com/kdmcinfo
http://journalism.berkeley.edu





 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.
Reply | Threaded
Open this post in threaded view
|

Re: [Micronet] password manager?

Bill Clark
In reply to this post by Jennifer Teverbaugh
One trick that provides a compromise between the added security of having
different strong passwords for each site you use and the
difficulty/insecurity of remembering/storing all those different passwords
is to have some kind of (for you) easily-implemented algorithm for
figuring out what password you use on each site.

For example, you could start with some strong "base" password, such as
"n]XP" and then do something like interleave the letters in the site name
in reverse order.

So your password for yahoo.com would be (ignoring the ".com" part)
"ono]hXaPy"

Your password for google.com would be "enl]oXoPg"

...and so forth.

Depending on the complexity of your algorithm it might take you a little
while to figure out the password for any particular site -- and you're at
a bit of a loss if the site gets bought and/or the domain name changes --
but you never need to write anything down or store it in anywhere, and
only need to remember your "base" password along with your algorithm.

It's not as secure as having a totally independent strong password for
each and every site you use, but since writing down and/or storing the
passwords already greatly reduces your overall level of security, it might
be a good trade-off in the grand scheme of things.

On the downside, since all of the passwords are connected to your "base"
password, there's no way to completely change any of them without changing
ALL of them, which would discourage regular password changes.  Also,
depending on the complexity of your algorithm it would be possible for a
rogue website to figure out your password scheme and thus deduce your
password for every other website.  If you used a truly complex algorithm
(such as a one-way hashing function taking your "base" password and the
domain name of the site as inputs) then that would eliminate that risk, at
the expense of having to have a convenient tool for carrying out the
one-way hash for you.

-Bill Clark

> Hi Micronet,
>
> I am finding myself using more and more passwords and having trouble
> keeping them all straight in my little notebook. :)  What is everyone
> using to manage their passwords?  I am considering KeePass wanted to get
> some input from this group before diving in.
>
> Thanks!
> Jennifer Teverbaugh
>
> --
> Jennifer Teverbaugh(Davidson)
> Technical Support
> Department of Bioengineering
> University of California, Berkeley
> 306F Stanley Hall, MC 1762
> Berkeley, CA 94720
> Office: (510) 642-5833
> Fax: (510) 642-5835
> http://bioeng.berkeley.edu
> note new email address: [hidden email]
>
>
>
> -------------------------------------------------------------------------
> The following was automatically added to this message by the list server:
>
> To learn more about Micronet, including how to subscribe to or unsubscribe
> from its mailing list and how to find out about upcoming meetings, please
> visit the Micronet Web site:
>
> http://micronet.berkeley.edu
>
> Messages you send to this mailing list are public and world-viewable, and
> the list's archives can be browsed and searched on the Internet.  This
> means these messages can be viewed by (among others) your bosses,
> prospective employers, and people who have known you in the past.
>



 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.
Reply | Threaded
Open this post in threaded view
|

Re: [Micronet] password manager?

Bill Clark

> Your password for google.com would be "enl]oXoPg"

...and as demonstrated here, it is possible to make typos or other
mistakes when implementing even the simplest of algorithms, such as
leaving out the second 'g' in 'google' :)

(And I know 'n]XP' isn't a very strong base password; it's just for
demonstration purposes.)

-Bill Clark


 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.
Reply | Threaded
Open this post in threaded view
|

Re: [Micronet] password manager?

Kevin Burney
In reply to this post by Michelle Ziegmann
I have been using LastPass for the last couple of years now.  I really like
its integration with most browsers on both Windows and Mac.  It has received
a positive review from Steve Gibson of Gibson Research (a well respected
engineer in the security field). http://www.grc.com/sn/sn-256.htm  It also
has excellent reviews from many of the top news outlets
http://lastpass.com/whylastpass_reviews.php
It essentially works as a very smart bookmark system on the web.  From
anywhere in the world you can get at your URL lists with secure notes and
login information.  With the ease it provides in managing my passwords I can
now use a unique password at each property I visit rather than using the
same passwords on multiple sites.

-Kevin

-----Original Message-----
From: [hidden email]
[mailto:[hidden email]] On Behalf Of Michelle
Ziegmann
Sent: Thursday, April 28, 2011 11:14 AM
To: [hidden email]
Subject: Re: [Micronet] password manager?

I've been very happy with LastPass, which I started using a few months ago.
I read several excellent reviews that gave me confidence trusting them. I
love that it syncs across all of my computers/devices.

Michelle Ziegmann

On 4/28/2011 11:04 AM, Jennifer Teverbaugh wrote:

> Hi Micronet,
>
> I am finding myself using more and more passwords and having trouble
> keeping them all straight in my little notebook. :)  What is everyone
> using to manage their passwords?  I am considering KeePass wanted to
> get some input from this group before diving in.
>
> Thanks!
> Jennifer Teverbaugh
>

--
Michelle Ziegmann
===========================
Electronic Communications Specialist
University of California Berkeley
Educational Technology Services


 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe
from its mailing list and how to find out about upcoming meetings, please
visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and
the list's archives can be browsed and searched on the Internet.  This means
these messages can be viewed by (among others) your bosses, prospective
employers, and people who have known you in the past.


 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.
Reply | Threaded
Open this post in threaded view
|

Re: [Micronet] password manager?

Lucy Greco-2
Hello:
would any of these solutions solve the problem of me occasionally having to give passwords to my readers and as the readers change not having to go out and change all my passwords my personal reader for home knows my banking password but I'd love to have a banking password that she doesn't know as well as a password that she does.

Lucy Greco
Assistive Technology Specialist
Disabled Student's Program UC Berkeley
(510) 643-7591
http://attlc.berkeley.edu 
http://webaccess.berkeley.edu


-----Original Message-----
From: [hidden email] [mailto:[hidden email]] On Behalf Of Kevin D. Burney
Sent: Thursday, April 28, 2011 1:23 PM
To: 'Michelle Ziegmann'; [hidden email]
Subject: Re: [Micronet] password manager?

I have been using LastPass for the last couple of years now.  I really like
its integration with most browsers on both Windows and Mac.  It has received
a positive review from Steve Gibson of Gibson Research (a well respected
engineer in the security field). http://www.grc.com/sn/sn-256.htm  It also
has excellent reviews from many of the top news outlets
http://lastpass.com/whylastpass_reviews.php
It essentially works as a very smart bookmark system on the web.  From
anywhere in the world you can get at your URL lists with secure notes and
login information.  With the ease it provides in managing my passwords I can
now use a unique password at each property I visit rather than using the
same passwords on multiple sites.

-Kevin

-----Original Message-----
From: [hidden email]
[mailto:[hidden email]] On Behalf Of Michelle
Ziegmann
Sent: Thursday, April 28, 2011 11:14 AM
To: [hidden email]
Subject: Re: [Micronet] password manager?

I've been very happy with LastPass, which I started using a few months ago.
I read several excellent reviews that gave me confidence trusting them. I
love that it syncs across all of my computers/devices.

Michelle Ziegmann

On 4/28/2011 11:04 AM, Jennifer Teverbaugh wrote:

> Hi Micronet,
>
> I am finding myself using more and more passwords and having trouble
> keeping them all straight in my little notebook. :)  What is everyone
> using to manage their passwords?  I am considering KeePass wanted to
> get some input from this group before diving in.
>
> Thanks!
> Jennifer Teverbaugh
>

--
Michelle Ziegmann
===========================
Electronic Communications Specialist
University of California Berkeley
Educational Technology Services


 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe
from its mailing list and how to find out about upcoming meetings, please
visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and
the list's archives can be browsed and searched on the Internet.  This means
these messages can be viewed by (among others) your bosses, prospective
employers, and people who have known you in the past.


 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.
Reply | Threaded
Open this post in threaded view
|

Re: [Micronet] password manager?

Kathleen Valerio
In reply to this post by Kevin Burney
Did this topic come up because of today's (4/28)  Dilbert strip or is it
just a coincidence.
http://dilbert.com/ 

Kathleen Valerio
CalPact Coordinator
643-0452


-----Original Message-----
From: [hidden email]
[mailto:[hidden email]] On Behalf Of Kevin D.
Burney
Sent: Thursday, April 28, 2011 1:23 PM
To: 'Michelle Ziegmann'; [hidden email]
Subject: Re: [Micronet] password manager?

I have been using LastPass for the last couple of years now.  I really like
its integration with most browsers on both Windows and Mac.  It has received
a positive review from Steve Gibson of Gibson Research (a well respected
engineer in the security field). http://www.grc.com/sn/sn-256.htm  It also
has excellent reviews from many of the top news outlets
http://lastpass.com/whylastpass_reviews.php
It essentially works as a very smart bookmark system on the web.  From
anywhere in the world you can get at your URL lists with secure notes and
login information.  With the ease it provides in managing my passwords I can
now use a unique password at each property I visit rather than using the
same passwords on multiple sites.

-Kevin

-----Original Message-----
From: [hidden email]
[mailto:[hidden email]] On Behalf Of Michelle
Ziegmann
Sent: Thursday, April 28, 2011 11:14 AM
To: [hidden email]
Subject: Re: [Micronet] password manager?

I've been very happy with LastPass, which I started using a few months ago.
I read several excellent reviews that gave me confidence trusting them. I
love that it syncs across all of my computers/devices.

Michelle Ziegmann

On 4/28/2011 11:04 AM, Jennifer Teverbaugh wrote:

> Hi Micronet,
>
> I am finding myself using more and more passwords and having trouble
> keeping them all straight in my little notebook. :)  What is everyone
> using to manage their passwords?  I am considering KeePass wanted to
> get some input from this group before diving in.
>
> Thanks!
> Jennifer Teverbaugh
>

--
Michelle Ziegmann
===========================
Electronic Communications Specialist
University of California Berkeley
Educational Technology Services


 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe
from its mailing list and how to find out about upcoming meetings, please
visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and
the list's archives can be browsed and searched on the Internet.  This means
these messages can be viewed by (among others) your bosses, prospective
employers, and people who have known you in the past.


 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe
from its mailing list and how to find out about upcoming meetings, please
visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and
the list's archives can be browsed and searched on the Internet.  This means
these messages can be viewed by (among others) your bosses, prospective
employers, and people who have known you in the past.


 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.