<?xml version="1.0" encoding="UTF-8" ?>
<rss version="2.0" xmlns:s="http://www.techrepublic.com/search" xmlns:dc="http://purl.org/dc/elements/1.1/"  xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
    <title><![CDATA[Discussion on Five features of a good password manager ]]></title>
    <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600]]></link>
    <atom:link rel="hub" type="application/rss+xml" href="http://pubsubhubbub.appspot.com/" />
    <atom:link rel="self" type="application/rss+xml" href="http://www.techrepublic.com/forum/discussions/102-326600/rss" />

    <description><![CDATA[]]></description>
    <language>en-us</language>
    <lastBuildDate>2013-05-21T18:45:54-07:00</lastBuildDate>
             

    <item>
        <title><![CDATA[Easier?]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3268605]]></link>
        <description><![CDATA[A multi-function password manager not only stores your logins with industrial-grade encryption, but also simultaneously does the random password generation and assignment for you, does auto-logins for you instead of copying and pasting and has other time-saving functions (all in a single interface). Your method sounds harder and more time-consuming, not easier. Not to mention pretty unsecure as well. If you ever lost, or lost control of, that USB, cracking an Excel password is a pretty trivial matter these days. There are several free tools available to do it. I have the impression you've not checked out good password manager apps in a while. I think you'll be surprised how easy and feature-rich they are.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3268605]]></guid>
        <dc:creator><![CDATA[Ed-M]]></dc:creator>
        <pubDate>Mon, 29 Mar 2010 06:40:10 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[there may be some concerns]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3268330]]></link>
        <description><![CDATA[Excel may leave remnants of your login credentials in memory. There may be something available through the swap file or a cold ram attack.Excel may not be using protected methods for copying your name and password into the login fields. Any existing sniffers on the system will easily capture your login and password during the copy/paste.Excel password protection may be breakable. Even if not easily broken, the file may not be encrypted meaning that data can be sucked out of it though it may not open through Excel without the password. Better to trust your information to an encryption application rather than MS Excel password protection.Otherwise, you seem to be getting the functions and benefits of a password manager like Keepass. Portable Keepass on your USB may be a nice upgrade to your approach.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3268330]]></guid>
        <dc:creator><![CDATA[Neon Samurai]]></dc:creator>
        <pubDate>Sun, 28 Mar 2010 07:27:47 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[RE: Five features of a good password manager]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3268297]]></link>
        <description><![CDATA[Interesting but there are easier ways, to wit:I use a Java program to generate random 10 position passwords from ~ 70 ascii characters,I store those passwords with the Logon Id and other data, like the personal questions, in a password protected Excel file on a USB drive,I NEVER check the Remember Me box on any logon website,I copy the ID and Password from my excel file into the Id and Password fields of the logon webpage.So, my password file is password protected,I only have to 'remember' ONE password so the remaining passwords can be as complex as random will make them,No logon or password is stored ANYWHERE else on the WWW, and when I go remote my USB file simply goes with me! No passwords are stored on any computer that I use, even at the library.This easily implemented technique really works well for me....]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3268297]]></guid>
        <dc:creator><![CDATA[oldcobolguy]]></dc:creator>
        <pubDate>Sun, 28 Mar 2010 06:33:54 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[keylogger protection:not so much]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3255259]]></link>
        <description><![CDATA[keepass FAQ says:&quot;Is the Auto-Type feature resistant to keyloggers?  By default: no. The Auto-Type method  ... and consequently is not keylogger-safe.   ...KeePass features ... TCATO, which renders keyloggers completely useless&quot;  (edited for brevity)Further reading says you have to enable TCATO for each entry.So, while it's possible, it isnt' practicle.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3255259]]></guid>
        <dc:creator><![CDATA[203T]]></dc:creator>
        <pubDate>Fri, 05 Mar 2010 19:49:38 -0800</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Valid point]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3253643]]></link>
        <description><![CDATA[Cross platform support is probably the one drawback to Password Safe.  That isn't an issue for me, at least yet, but for those who need it, I can understand where it would be a problem.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3253643]]></guid>
        <dc:creator><![CDATA[LarryBoy2]]></dc:creator>
        <pubDate>Wed, 03 Mar 2010 11:50:10 -0800</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Password Safe]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3253640]]></link>
        <description><![CDATA[For a year or two I have been using Password Safe, as well, for similar reasons.  If Bruce Schneier recommends it, I figure it has to be worth it's salt.  http://www.schneier.com/passsafe.htmlI've found it to be fairly easy to use, and it seems to meet all the stated criteria.  But a comparison would still be interesting.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3253640]]></guid>
        <dc:creator><![CDATA[LarryBoy2]]></dc:creator>
        <pubDate>Wed, 03 Mar 2010 11:45:07 -0800</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Really?]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3253159]]></link>
        <description><![CDATA[It does all of the mentioned suggested requirements and so much more.Really?  I was under the impression it was proprietary closed source software that was tightly integrated with browsers -- thus violating the &quot;verifiable design&quot; and &quot;self-contained functionality&quot; requirements.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3253159]]></guid>
        <dc:creator><![CDATA[apotheon]]></dc:creator>
        <pubDate>Tue, 02 Mar 2010 18:09:52 -0800</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Happy RoboForm User]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3253142]]></link>
        <description><![CDATA[I've also been using Roboform for many years now-back when it was known as &quot;Gator&quot;. I'm extremely happy with the program. It does all of the mentioned suggested requirements and so much more. The amount and type of data able to be stored in the program gets better with every release. The updates always add super new features, and keep up with the ever-changing O/S's, Internet browsers, etc. I was using Win98 when I first started using Roboform, and it's come right along the operating system's with me to where I am now-using Vista64 SP2.Not only does it maintain and genrate passwords for me, it's a great form-filling application and holds all of my family's sensitive info (such as banking) and it's so versitile that it crosses over a multitude of applications.It has a great feature for off-site back-up and syncronization so data loss on my local machines is not a completely terrifying experience!It's extremely user friendly, and I believe that is what prompted me to use it in the first place.Customer service is fantatic, too.What always amazes me is when I come across a website that I haven't visisted in 6 years, and Roboform still has my log-in information for it. I love that! No tedious and needless re-creation of the wheel (user profiles and log-in's, in this caes) for sites that haven't been visited in years.I absolutely love Roboform, recommend it, and would be so very upset if the company discontinued the product any time soon.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3253142]]></guid>
        <dc:creator><![CDATA[gothkittykiss@...]]></dc:creator>
        <pubDate>Tue, 02 Mar 2010 17:27:16 -0800</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Have done some testing]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3252863]]></link>
        <description><![CDATA[I've done some extensive testing and use of several products over the years. (Password Corral, Oubliette, Robo, Lastpass, PassPack (online) and KeePass.) We were looking in our case for the solution with the most mobile, cross-platform potential as well as pretty much all the other criteria mentioned. KeePass rather amazed us, especially the newer pro version (http://keepass.info/news/n090912_2.09.html). Of course, cost was not outside the scope of consideration either, although most products are free.KeePass has the added dimension of keylogger protection, a raft of extensions and plugins, including one for FireFox that makes it into a decent form-filler as well. It is scriptable and can work from a master hotkey for any kind of login for any kind of application, online or off. I keep my encrypted KeePass database in on a private Dropbox folder and have it shared and synchronized between four computers as well as my PortableApps version on my thumb drive and my Ubuntu VM. It's configured on all the computers to automatically generate a local backup.No problem when switching from another product. It imports databases from a long list of them, including your Firefox password store. One interesting thing I accidentally noticed in the pro version was that after I defined which password pattern I wanted for a long list of logins I was creating, its preview returned to me 30 different passwords that conformed to the pattern on a single screen. That saved me some time. I'd say its uniqueness from other products is that it can be a production tool for security techs as well as a very worthy personal password manager.I hope that came across as an objective review. I have a soft spot in my heart after long use of a couple of the other products, but I finally had to say goodbye.Ed]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3252863]]></guid>
        <dc:creator><![CDATA[Ed-M]]></dc:creator>
        <pubDate>Tue, 02 Mar 2010 08:23:37 -0800</pubDate>
    </item>
             

    <item>
        <title><![CDATA[great application]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3252778]]></link>
        <description><![CDATA[Password Safe was my first unless one can consider Locknote in the same software class.My only complaint about Password Safe is cross platform support. The Maemo version did not support the same data file format as the Windows and general desktop versions. Maemo's Password Safe build may have been updated finally but the delay drove me to look at Keepass and I've not looked back since.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3252778]]></guid>
        <dc:creator><![CDATA[Neon Samurai]]></dc:creator>
        <pubDate>Tue, 02 Mar 2010 07:14:54 -0800</pubDate>
    </item>
             

    <item>
        <title><![CDATA[eWallet by illium Software]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3252733]]></link>
        <description><![CDATA[I've used eWallet for almost five years now and it's a great product! eWallet is highly configurable and supports password management for my Windows XP and Win-Mobile devices. On the two occasions where I needed support for some questions, illium support responded in a timely and very helpful manner. eWallet is compatiable with a number of O.S. and hardware platforms. Typically, I dont make product suggestions but, in the case of eWallet, I've been very pleased with the product and support.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3252733]]></guid>
        <dc:creator><![CDATA[edwill4500]]></dc:creator>
        <pubDate>Tue, 02 Mar 2010 06:16:06 -0800</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Lastpass .....similar to Roboform]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3252718]]></link>
        <description><![CDATA[Lastpass rocks. Very similar in concept to Roboform and is completely mobile and cross platform.https://lastpass.com/]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3252718]]></guid>
        <dc:creator><![CDATA[DC_Federal_Employee]]></dc:creator>
        <pubDate>Tue, 02 Mar 2010 06:09:03 -0800</pubDate>
    </item>
             

    <item>
        <title><![CDATA[RoboForm]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3252669]]></link>
        <description><![CDATA[Been using this program since 2005.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3252669]]></guid>
        <dc:creator><![CDATA[jrpettit@...]]></dc:creator>
        <pubDate>Tue, 02 Mar 2010 05:12:57 -0800</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Sticky Password]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3252666]]></link>
        <description><![CDATA[Yes, I would like to see a comparison too, because I think, that Sticky Password manager fulfills these criteria.http://www.stickypassword.com]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3252666]]></guid>
        <dc:creator><![CDATA[mikin]]></dc:creator>
        <pubDate>Tue, 02 Mar 2010 03:15:44 -0800</pubDate>
    </item>
             

    <item>
        <title><![CDATA[RE: Five features of a good password manager]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3252662]]></link>
        <description><![CDATA[I use MirekW's PINs. It's OSI Certified Open Source Software, standalone/runs from portable storage (including a floppy if you like that sort of thing), uses 448 bit Blowfish algorithm, and has a lot of other powerful features, including a function to generate very complex and long passwords (sometimes I am appalled at the maximum password length some sites impose). It has a tree/grouping function that makes it easier to store passwords in memorable categories, and has a basic search function. There are internal security functions; hide passwords from view unless viewing an entry; empty clipboard on minimise to tray/closure; lock database on minimise; date password/site initiated; expiry date and function; system sounds to alert user to status[...]I've been using it for approaching 10 years, possibly longer... According to Properties Plus my current file was created on 22 July 2002 19:01:43.640! Before that I used Oubliette. Like AT Notes and TrueCrypt it's one of those now taken for granted things, without which I'd be uncomfortable. It won't look very Vista/Windows 7, but I chose it for functionality not beauty.http://www.mirekw.com/winfreeware/pins.html]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3252662]]></guid>
        <dc:creator><![CDATA[Zwort]]></dc:creator>
        <pubDate>Tue, 02 Mar 2010 02:10:53 -0800</pubDate>
    </item>
             

    <item>
        <title><![CDATA[I would as well]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3252519]]></link>
        <description><![CDATA[I have admired Mr. Schneier forever. He recommended an application called Password Safe. I have been using it since beta.I would love to learn what others thought about it. After reading Chad's list or requirements, it seems to meet most. Yet, I am by no means an expert.http://passwordsafe.sourceforge.net/]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3252519]]></guid>
        <dc:creator><![CDATA[Michael Kassner]]></dc:creator>
        <pubDate>Mon, 01 Mar 2010 16:02:40 -0800</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Yes, I'd like to see a comparison]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3252501]]></link>
        <description><![CDATA[... of available password managers, based on these criteria.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3252501]]></guid>
        <dc:creator><![CDATA[Sterling "chip" Camden]]></dc:creator>
        <pubDate>Mon, 01 Mar 2010 14:49:12 -0800</pubDate>
    </item>
             

    <item>
        <title><![CDATA[143 passwords needing reset after a crash]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3252471]]></link>
        <description><![CDATA[Good ideas?How about suggestions for PWM software.Maybe a list of the common contenders.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-326600-3252471]]></guid>
        <dc:creator><![CDATA[bboyd@...]]></dc:creator>
        <pubDate>Mon, 01 Mar 2010 13:19:01 -0800</pubDate>
    </item>
    </channel>
</rss>

