6 ms·

As a Dropbox user I am just going to change it back to my old password anyway.

by tomjen3 10y ago

zaidf 10y ago
A good PM would state in the specs to check the new password isn't the same as the old one.
StavrosK 10y ago
Why? Use a password manager, then new passwords become free.
- mrswag 10y ago
  I know I should, but I can't bring myself to it. I'm constantly switching between three OS, two browsers, different, sometimes auto-resetting computers, and it seems to be too much of a hassle. How do I handle this? The only obvious option is a paper notebook.
  - bbrks 10y ago
    LastPass works fine for me in this scenario (plus a mobile device). I'd rather be on an Open Source password manager, but I've found the sync is always too painful to do yourself.
  - icc97 10y ago
    I'm only on two OSes (Windows, Linux) and predominantly two browsers (FF, Chrome), but Keepass (Works in Windows and Linux - pretty sure Mac too) + KeepassHttp plugin + PassIFox [1] + ChromeIPass [2] works for me. I find it also nicer than LastPass as it combines with the native password saving of FF/Chrome rather than the highjacking and restyling of input boxes that look like user/passwords done by LastPass. [1]: https://github.com/pfn/passifox [2]: https://chrome.google.com/webstore/detail/chromeipass/ompiailgknfdndiefoaoiligalphfdae/related?hl=en-US
    - nialo 10y ago
      KeepassHttp is not even a little bit secure if run over a network, see for example: https://github.com/pfn/keepasshttp/issues/258 https://github.com/pfn/keepasshttp/issues/258 It's probably fine so long as both your 'client' and 'server' are on localhost, but it'll probably never be secure if the server is exposed to the internet.
  - rrdharan 10y ago
    I regularly switch between a MacBook for work, Linux desktop at work, Windows 10 home machine, iMac home machine, iPad, and iPhone, using at least two browsers on each (Chrome/Safari or Chrome/Edge) and often two Chrome profiles. I use 1Password with the encrypted vault synced to Dropbox and it works wonderfully well. 1Password has native apps / browser extensions for all of those platforms (except Linux local app where they support and recommend using Wine).
  - StavrosK 10y ago
    I use KeePass with Keepass2Android (which has Dropbox integration), and Firefox Sync. You can log in to Firefox Sync and all your passwords will be there with you, but the canonical storage is KeePass. If I'm at a resetting computer, I just type it by hand from the mobile phone. It's not quite as convenient as using one password for everything, but it's a little bit less convenience for orders of magnitude more security.
- kevinastone 10y ago
  This becomes tough when my passwords are synced via my dropbox account. I need to memorize my app store and dropbox passwords, the rest of "free".
  - pyre 10y ago
    Not unless you make sure you backup your password file somewhere other than dropbox. It doesn't even have to be very often, just whenever you update your Dropbox password (for example).

As a Dropbox user I am just going to change it back to my old password anyway.

by tomjen3 10y ago

As a Dropbox user I am just going to change it back to my old password anyway.

zaidf 10y ago

A good PM would state in the specs to check the new password isn't the same as the old one.

StavrosK 10y ago

Why? Use a password manager, then new passwords become free.

mrswag 10y ago
I know I should, but I can't bring myself to it. I'm constantly switching between three OS, two browsers, different, sometimes auto-resetting computers, and it seems to be too much of a hassle. How do I handle this? The only obvious option is a paper notebook.
- bbrks 10y ago
  LastPass works fine for me in this scenario (plus a mobile device). I'd rather be on an Open Source password manager, but I've found the sync is always too painful to do yourself.
- icc97 10y ago
  I'm only on two OSes (Windows, Linux) and predominantly two browsers (FF, Chrome), but Keepass (Works in Windows and Linux - pretty sure Mac too) + KeepassHttp plugin + PassIFox [1] + ChromeIPass [2] works for me. I find it also nicer than LastPass as it combines with the native password saving of FF/Chrome rather than the highjacking and restyling of input boxes that look like user/passwords done by LastPass. [1]: https://github.com/pfn/passifox [2]: https://chrome.google.com/webstore/detail/chromeipass/ompiailgknfdndiefoaoiligalphfdae/related?hl=en-US
  - nialo 10y ago
    KeepassHttp is not even a little bit secure if run over a network, see for example: https://github.com/pfn/keepasshttp/issues/258 https://github.com/pfn/keepasshttp/issues/258 It's probably fine so long as both your 'client' and 'server' are on localhost, but it'll probably never be secure if the server is exposed to the internet.
- rrdharan 10y ago
  I regularly switch between a MacBook for work, Linux desktop at work, Windows 10 home machine, iMac home machine, iPad, and iPhone, using at least two browsers on each (Chrome/Safari or Chrome/Edge) and often two Chrome profiles. I use 1Password with the encrypted vault synced to Dropbox and it works wonderfully well. 1Password has native apps / browser extensions for all of those platforms (except Linux local app where they support and recommend using Wine).
- StavrosK 10y ago
  I use KeePass with Keepass2Android (which has Dropbox integration), and Firefox Sync. You can log in to Firefox Sync and all your passwords will be there with you, but the canonical storage is KeePass. If I'm at a resetting computer, I just type it by hand from the mobile phone. It's not quite as convenient as using one password for everything, but it's a little bit less convenience for orders of magnitude more security.
kevinastone 10y ago
This becomes tough when my passwords are synced via my dropbox account. I need to memorize my app store and dropbox passwords, the rest of "free".
- pyre 10y ago
  Not unless you make sure you backup your password file somewhere other than dropbox. It doesn't even have to be very often, just whenever you update your Dropbox password (for example).