RE: O/T: SENIOR TRYING TO SET PASSWORD

Thanks Lew! I resemble the User from time to time. Just tell me the xxx rules! Really.

Mart> Enjoy

Martin Eastburn wrote in news:CRjqx.254483 $ snipped-for-privacy@fx21.iad:

Senior? Stupid password rules affect most of us in exactly the same way. It gets so bad sometimes that the only thing you can do is write them down.

Puckdropper

I put them in a addon call Quicknote in Firefox. With them there I can pop open Quicknote and copy the needed ID and password to the proper space on the logon screen. It is much easier that having pieces of paper spread around the area where you use you computer

Best damn password manager going is RoboForm. $19/year and you can sync it to all devices you use and you only have to remember a master password. Also functions as a great bookmark organizer, etc.

Financial password needed? It will automatically generate and save one for you. How about "YJD4cIk3vEZ04^1kRMa$Co5"?

That'll keep your info safe.

Check it out, read the reviews from the computer "experts" and you'll see what a deal it is. I'd be lost without it.

Try a utility called KeyPass. It's a good password vault. You can do a lot of good password stuff with it. You can create response code to automatically enter your password into various systems.

You can have it create passwords, so your password varies from site to site. Trust me, many companies are stupid about passwords, they store them in clear text in a db.

Keepass is free. It's a hell of a good program.

Apples and oranges, Woodchucker.

Roboform works across multiple platforms Win/Android/Mac/iOS/Linux. Can be used with storage in an encrypted local DB (like Keepass) but most, including moi, utilize the utility of being able to store your encrypted password DB in a "secure" cloud and have it constantly syncing with your various devices. Is the difference in utility worth $19/year? Depends on what you use it for. I use much of its utility and with >1,100 bookmarks alone (easily searchable) that I use in my work, it is obviously a must have for me.

One thing I would be a bit leery of is its track record. It appears that Keepass has only been available for less than one year whereas Roboform has been "use tested" and evaluated for, I think, ten years or more.

Not saying Keepass is not as good, but it takes some seasoning before I'll put a lot of trust in it and prefer the utility of Roboform

In any event, if you conduct business over the internet, a password keeper of some sort is a no-brainer. A different, exceedingly difficult/lengthy password for each financial account is smart. Password keepers allow for this and make it easy to stay safe.

Lucky you. I printed out the passwords from Firefox and it was 4 pages of one lines. I have a 3/4" binder of passwords. Been using them for

Mart> >> Martin Eastburn wrote in news:CRjqx.254483

Sync - send to the cloud for someone to hack. Tricky stuff.

Martin I use multiple colors in my ink well. Each time I refill I'll pick a different color. From red to peacock blue Navy to black. Complex color is developed and is different but can be identified. Security.

Mart> >>> Martin Eastburn wrote in news:CRjqx.254483

People get carried away with this password thing. There are some areas where you must have a very secure passwords, and others where it does not matter.

Those that must have a very secure passwords are those that has to do with your money or assess. With these sites you do not want anyone else to have access. Buy even with these, there are ones that are more critical than others. Any site where you can add or subtract from your assets are more critical than those where you can only review your assets. If some one gets into these sites, your world could literally end, as you try to recoupe your losses.

Email would be the next most serious, but unless you are working on a replacement for gasoline, if some one gets into it, the consequences would only be a major hassel.

Then there are the sites where the password is more for the site to control access, than it is for your account security. Does it really matter if someone uses your password to get into your Garden Web site. Is it really going to be that big of disaster to access the news site of your favorite newspaper? What about using you password to get into the local genealogy site?

The security of the password must be gaged to the sensitivity of the data that is available on the site.

From the article:

Users most in danger of being personally hacked as a result of the breach, first detected Friday, are those who have committed one or both of these two cardinal sins of online safety: using a weak master password and reusing that password on multiple sites.

Bottom line is the cloud stored password files from LastPass, et al are safe unless you are not using a modicum of common sense which, as we all know, isn't...

If it really has to be secure you need more than one means of securing it. The old saying is "something you know, something you have, something you are". The most secure systems use all three. My employer uses two. I got a letter from my bank a few weeks ago saying that they were going to be sending me a smart card in the near future, so things are moving in that direction, slowly.

I use roboform. I have been using it for 10+ years and I remember it in the 90's, IIRC.

so true....... It is time we find a way to do away with passwords...... john

Enjoy

Lew

-----------------------------------------------------

WINDOWS: Please enter your new password.

USER: cabbage

WINDOWS: Sorry, the password must be more than 8 characters.

USER: boiled cabbage

WINDOWS: Sorry, the password must contain

USER: 1 boiled cabbage

WINDOWS: Sorry, the password cannot have blank spaces.

USER: 50damnboiledcabbages

WINDOWS: Sorry, the password must contain at least one upper case character.

USER: 50DAMNboiledcabbages

WINDOWS: Sorry, the password cannot use more than one upper case character consecutively.

USER: 50damnBoiledCabbagesShovedUpYourAss!

WINDOWS: Sorry, the password cannot contain punctuation.

USER:

ReallyPissedOff50DamnBoiledCabbagesShovedUp YourAssIfYouDontGiveMeAccessNow

WINDOWS: Sorry, that password is already in use.

I think it smart not to use a password manager designed for the masses (for the same reason people target the Windows OS when creating viruses).

You are obvioulsy dazed an unquetionably confused. I have been using Keepass for many years. The nice thing is not being cloud based. I don't want a cloud based solution.

FWIW Roboform can be used with "OUT" cloud based integration, that flavor is what I use and it is basically a one time fee until you need to upgrade, like most all other software.

Amen to that. I'm still confused why many people use cloud base programs. Many cloud base programs get hacked and you can bet password programs are on the list of hackers.

I don't use cloud anything and I'm fine with doing everything on my own.