Discussion on:

Are you in favor of password management software? Take the poll.

Do you have any recommendations of particular programs or solutions for storing passwords?
Any reasons to steer clear these types of programs?

How do you keep your passwords secure and memorable?

As security breaches have become very common, it becomes essential to control access to the privileged passwords in enterprises. Password Management Solutions help in controlling access to administrative passwords, besides helping in storing them in a centralized vault.

Administrators get access only to the required passwords. As passwords resides in safe custody, security breaches could be minimized to a great extent.

So, I feel Password Managers are a absolute must.

ManageEngine Password Manager Pro is one such secure vault for storing and managing shared sensitive information such as passwords, documents and digital identities of enterprises.

Visit http://www.manageengine.com/products/passwordmanagerpro/index.html for details

Hi williamjones
RoboForm is actually quite useful as a password manager and I believe it is secure too.

I use roboform pro and really like it. It's pretty secure, and gives me good passwords. I tend to use a generic password for blogs and forums, but a generated password for any website that accesses financial or other confidential information.
It doesn't work with Chrome though, which is the only reason I haven't installed Chrome.

It integrates a very easy to use encryption form filler, and used with a pass generator, can remember the individual URLs like RoboForm does.

I don't have to remember the extravagantly long passwords, and they can be made exremely complicated. In fact I don't really know what they are myself, as the manager remembers them for me; when I change them, it automatically appends the new change.

A check of my hard drive with ID finder confirms that other personal information is not written to the hard drive without encryption.

I do not work for any man or company I just hate spyware/malware to pieces!

I also use Roboform. It works very well and is very secure. And it has a portable (USB) version and an online version which makes it easy to use almost anywhere. A great product IMHO.

Ive been fairly lazy with same passwords being used across multiple sites important and some not and its fairly risky doing it.

Lately ive been using lastpass which integrates with firefox and IE and only need to login into it in the browser and you can access it all anywhere. Has an autofill option to so you dont need to remember them and it can generate secure passes too.

Bit daunting to have all the passwords stored online though but you can export them if your worried.

However it does not work with Chrome or FireFox!!!

On Roboforms main site and allowes use with FF.

Roboform does work with FireFox ... use it everyday. Don't know about Chrome, though.

Firefox now has an add-on for RoboForm. Go to Add-ons for FireFox, search on RoboForm, download the tool, and you now have Robo on FireFox.

Cheers.

I was checking out the Roboform site and I see they have an Alpha program available for Chrome.

Pro.
1 uses a master password to encode all the others.
2 has a random character generator, 1-511 characters with 'A-Z' and/or 'a-z' and/or '0-9' and/or whatever special characters you want; you can also exclude the same characters and/or set hexadecimal characters A-Z, 0-9.
3 you can neither have it installed on your PC,or on a USB flash drive, portable on any PC that has a USB port.

con.
RoboForm runs on Microsoft Windows 2000, XP, Server 2003, and Vista (all 32-bit versions).

it isnt much batter to say it also works in the 64-bit versions.

I also use goodsync to syn between pc's on network, pendrives, and roboforms website store so I can access from any pc

Sticky Password has all of these features and what is the best on it - it is not delivered through some poor toolbar, but it is integrated right into the browser or any application like Skype, QiP etc.

And for more, it can be unlocked by password and even by phone or USB.

I can only recommend it to all Roboform users, because it is far more better and more simple.

I've always used several sets of passwords - one set based off one word for financial, another for places that don't matter much, another for passwords I have to share (email on another person's domain) - and varied them. But it quickly became impossible to remember which variation I'd used on _this_ site. So I had an Excel spreadsheet because I was uncomfortable with letting the browser remember my passwords and very uncomfortable with putting them up in the cloud.

Finally I decided it was time to get a better solution - did some investigation and came up with KeePass. I like the same things you do - open-source and cross-platform, able to install to USB. Also encrypted database, auto-type (though that took a bit of work to set up), and the ability to generate highly secure passwords (I've just started using that).

I have a very secure password for the database itself, which resides on my hard drive and gets regularly transferred to a flash drive for use elsewhere. I'm gradually transforming my standard passwords into more complex ones, which KeePass can do quite easily. The Auto-type is a pain until you figure out that the title of the entry needs to match the title of the window you're going to be using the username and password in for auto-type to work (or there's a way of creating an auto-type for a specific target window, if the title of the window isn't useful to identify what the password is for). You can also use that to do a different sequence than the standard "username-tab-password-return".

It's a good program, with features I'm still figuring out as I go. It's the only one I've used regularly - I had my passwords in my browser for a bit but aside from not working on other computers (Xmarks would fix that) it just made me nervous. KeePass feels a lot safer.

I have used LastPass for a year now as a Home User. I periodically change the password for it but it works fine. Of course any site requiring a higher level of security (e.g, Banks) should never be accessed through Password Management Software.

Sensitive passwords always must be kept separate from "everyday" passwords. And it really needs no software, juist some imagination. I'd give you an example, but then someone might gain access somewhere if it's used.
Security is key, pardon the pun.

Personally, I enjoy KeePass, though the auto complete is buggy on some sites.

Can anyone recommend a good, locally hosted, client-server solution for managing passwords? We have several users that access the same websites and must use shared credentials. It would be nice to have a central password repository that can be accessed and updated by any authenticated user (and can be backed up). Thanks!

Mine is Passordvault from Lava Software.
This app is very reliable and the customer service is friendly.
It also include a to go version so that you could cary your password safely on trips.
Better still it has a sync feature to sync the passwords on all of your computers.
I run it for years from the beginning without any problems.

You have to group passwords according to risk.
I am on multiple blog and other sites, which have little or no personal information and to be honest I don't really care if they get hacked. They all get the same Id and password if possible.
As you move up the risk profile the passwords get harder and different.

The one I use is free and is called Password Corral by Cygnus Productions.
Can be found here:
http://www.cygnusproductions.com/freeware/pc.asp

Hope this helps someone.
Ttyl, Gary

William,
I use Accesmanager 2 to store my passwords. Has very high encryption and you can run it on a USB memory stick without storing any data on your hard drive. You can then lock the USB memorystick away safely. I have tried various ones but have settled on this one

Regards

Gerry