Password managers necessary? Safe?

Due to the ever-increasing requirement to have a user id and password to access sites online, I have started keeping this info in a word doc.

Since I have a fairly well locked-down PC and update and run all the virus/malware/spyware scanners regularly, and keep up on security measures, this has not been a great concern. I do keep the most critical ones, like online banking, only in MY memory, but do have a few online payment sites documented in the word doc.

So, here's my quandary. Should I use a password manager, rather than the word doc? Are the password managers secure, or are they at risk themselves? If they "phone home ", presumably to check for updates, is that a concern?

Would it be risky to put ALL passwords into a manager, or should I still commit the most crucial to memory?

Is the password keeper in Firebird totally secure? If not, which of the freeware managers are the best, or are they all basically the same from a security standpoint?

Thanx

 

I'm with Steve- I only have a couple of passwords (my bank makes me change mine every 30 days!) so, if I forget, then one of them will work! I also have an index card taped under my KB in case I drop dead. (Don't laugh-my kids' dad did!) For user ID, I almost always use my primary email addy. K*I*S*S* (keep it simple, silly!)

The Word doc is a good idea- you can print it, or email it to a trusted friend, and then, if you trash your computer accidentally, no need to email every account asking for your info back. Just make sure it is kept in a place that is "safe" from eyes that don't need to see it.

I guess I'm leery of password managers, because if I were a hacker, I'd look for those programs, first. On relatively unimportant sites (security wise, for example, the BBS) let Windows remember your log in and/or passwords.

I did try out Roboform awhile back, but I didn't care for it. I like the Google toolbars "auto fill" feature better, anyway.

Johanna

 

If you're worried about the word doc being on your computer, why not put it on a floppy disk or a removable pen drive? Any hacker would have a tough time getting at that if it wasn't in the drive.

I've used Roboform for quite a while now and have grown quite fond of it. Different strokes ..... The one thing I really like about it is that you can choose to store it's database on a removable drive. When you need it, plug the pen drive or whatever in and Roboform recognizes it immediately. When you're done using it, remove the drive. The database isn't stored anywhere on the computer, only on the removable drive. Can't get much safer than that.

 

I use a piece of software called Keypass. It is open source and allows you to put the password database on removeable media. That way, you can use it on mutiple PC's, say home and work, and not leave your passwords on either. I found a review of this program on Tom's hardware and have been using it ever since. Here is the link to the article:
http://www.tomshardware.com/consumer/20040507/index.html

Hope this helps!!
Craig

 

RoboForm

I am a great fan of Roboform. It does much more than just store passwords. All data that it keeps is triple DES encrypted. Each password is stored in its own file in whatever directory you choose. It is easy to copy your passwords files to another device or PC. It will autofill webforms from different identities. I have an identity for home and one for work. It warns you if it autofills sensitive data like social security number. All you have to remember is your master password. Of course if you forget the master password you are dead -- there's absolutly no recovery. See: http://www.roboform.com/ It is free for 2 identities and 10 passwords.

I use the Pro edition and I have over 150 Passcards. I have given my Power of Attorney the master password and that all she willl need to know to access all of my web sites if something happens to me.

I love it!!!

 

RoboForm

I have been using RoboForm for better than a year with all logins fully encripted. I also use Spamex.com to create Disposable Email Address (DEA) for ordering items online--a different one for each vendor. To help keep track of them all I use ClipCash. That in combination with RoboForm for the PWs has kept me quite secure.
Wes