Recently, Habré published a couple of articles on passwords and the convenience of working with them. The authors proposed algorithms for creating "easily remembered" or "easy-to-type passwords." I offer a different way and convenient tool.
I do not worry about the convenience of remembering or typing passwords, I prefer to keep my head free from such things. I have almost 150 passwords (email, ICQ-Shmaski, hosting, statistics, services), and none of them is repeated. Passwords themselves look like this: 96DtL`yL \, BC # @ 2w'QEP
Pounding horror, right? But entering such a password takes me a second and a half, and I have never made typos in them.
')
Once I was skeptical of various password keepers. There were five passwords, they were easily remembered. But gradually the passwords became more and more, and once the quantity turned into quality. And even with friends began to divert massively different accounts.
It is time to organize this business. If we write down the passwords, then do it so that it is convenient and secure. I went through a lot of software and made a choice that I was pleased with.
But first I’ll tell you about some of the criteria that guided me when organizing the storage of passwords.
Security
- Passwords must be long and complicated. In a safe lock, the main thing is its stamina, not pleasantness to the eye.
- Passwords should not be repeated. Otherwise, having gotten one password, the attacker will gain access to a bunch of different places.
- Passwords should be stored in encrypted form. Locking the safe, do not throw away the keys.
Convenience
- Passwords are long and complicated, but this should not bother me. Therefore, the password keeper should allow you to copy and paste the password, immediately clearing the clipboard.
- Need a generator of long and complex passwords. This work is perfectly done by a car, why should I strain?
- Passwords must be with me. I used to remember passwords, they were in my head. Now I do not remember. The program should allow you to work not only on a laptop, but also on my handheld or cell phone.
What did i choose
I rummaged through a bunch of programs. Some did not have a version for the handheld, others braked, in the third “prettiness”, such as a credit card image, they killed the desire to use them (and this was paid software). The program I chose is called KeePass . Here are some of its advantages:
- Comfortable. And there are no ugly "credit cards" in the interface.
There are programs for Windows, Linux and Mac.
There are programs for Pocket PC, phones with Java and even for Blackberry.
Convenient and customizable password generator.
Supports Twofish and AES with a 256-bit key.
In addition to the master password, you can also restrict access to the key file.
The master password is protected by the SHA-256 function.
Allows you to work with multiple password databases.
There is a search and sorting database passwords.
Multilingual interface, there is a Russian version.
Copied the password, pasted, and KeePass cleared the buffer behind it.
Passwords are protected even in memory.
You can export passwords to XML, TXT, CSV, HTML, if necessary.
You can also import passwords, which facilitates the migration from sloppy software.
Can work with flash drives.
Free and legal.
Open source, plugins and all that.