4 ms·

Protect it with a strong passphrase.

zatkin 10y ago
https://www.xkcd.com/936/ https://www.xkcd.com/936/ I recommend reading this XKCD comic for how to come up with strong passphrases.
- whatsdoom 10y ago
  https://pypi.python.org/pypi/xkcdpass/1.8.2 https://pypi.python.org/pypi/xkcdpass/1.8.2 Nice implementation of xkcd passwords.
  - eatbitseveryday 10y ago
    Or.. you can use the web with this one! https://xkpasswd.net/ https://xkpasswd.net/
    - ibotty 10y ago
      Bright idea! Using someone elses Computer To generate your password!
      - eatbitseveryday 10y ago
        It's easier to use for the lay person than a from-source-compilation you execute as a command line binary.
        wtbob 10y ago
        Yes, it's easier, but it's completely and totally insecure. Security is not terribly hard, but it is completely and totally unforgiving. If you slip up on security, you will suffer, or others will suffer because of you. Don't slip up on security.
- KMag 10y ago
  I recently put up on github the latest incarnation of a password generator I've been using for over a decade now.[1] It uses gpg to encrypt each site's username and a random password (using /dev/urandom or CryptGenRandom as the entropy source) in a separate file ~/Documents/Passwords/<domain>.gpg . At the time I first wrote it, I wanted something that was future-proof and where I could decrypt my passwords anywhere, and where a hardware fault while adding a new password was unlikely to cause corruption of pre-existing passwords. Make your xkcd wordlist (http://google.com/search?q=oxford+3000 http://google.com/search?q=oxford+3000 is a good start), one line per word, and bzip2 compress it as ~/Documents/Passwords/wordlist.txt.bz2 (or My Documents\Passwords\wordlist.txt.bz2 on Windows) and run the password generator with --alphabet 100 (restricting choices of "alphabets" to those with over 99 characters) and you'll get xkcd-style pass phrases. I also put some numbers in my word list, so I get passwords like blood Evil pint Urge occupy short railway 38 Diagram elbow Arrest 80 Ceremony monday salt sector It defaults to making the password/pass phrase length ceil(96 * log(2) / log(len(alphabet))) (96 bits of entropy). If you want to dial that up to 128 bits (or down to 80 bits), put { "bits" : 128 } in ~/Documents/Passwords/config.json (My Documents/Passwords/config.json on windows). [1]https://github.com/kmag/store_password_gpg https://github.com/kmag/store_password_gpg
  - rocqua 10y ago
    Look at diceware for another great system to generate passwords.
    - KMag 10y ago
      Yes, I started out with a script that used the diceware wordlist to generate passwords and manually used gpg to store my passwords, then evolved my script to combine the two steps I was doing manually. Have a look at my script. It's all of 200 lines. Easy to audit, and I'm not doing any of my own crypto or random number generation.
Dylan16807 10y ago
And set the encryption to use pkcs8 with a million iterations.

https://www.xkcd.com/936/ https://www.xkcd.com/936/ I recommend reading this XKCD comic for how to come up with strong passphrases.

whatsdoom 10y ago
https://pypi.python.org/pypi/xkcdpass/1.8.2 https://pypi.python.org/pypi/xkcdpass/1.8.2 Nice implementation of xkcd passwords.
- eatbitseveryday 10y ago
  Or.. you can use the web with this one! https://xkpasswd.net/ https://xkpasswd.net/
  - ibotty 10y ago
    Bright idea! Using someone elses Computer To generate your password!
    - eatbitseveryday 10y ago
      It's easier to use for the lay person than a from-source-compilation you execute as a command line binary.
      - wtbob 10y ago
        Yes, it's easier, but it's completely and totally insecure. Security is not terribly hard, but it is completely and totally unforgiving. If you slip up on security, you will suffer, or others will suffer because of you. Don't slip up on security.
KMag 10y ago
I recently put up on github the latest incarnation of a password generator I've been using for over a decade now.[1] It uses gpg to encrypt each site's username and a random password (using /dev/urandom or CryptGenRandom as the entropy source) in a separate file ~/Documents/Passwords/<domain>.gpg . At the time I first wrote it, I wanted something that was future-proof and where I could decrypt my passwords anywhere, and where a hardware fault while adding a new password was unlikely to cause corruption of pre-existing passwords. Make your xkcd wordlist (http://google.com/search?q=oxford+3000 http://google.com/search?q=oxford+3000 is a good start), one line per word, and bzip2 compress it as ~/Documents/Passwords/wordlist.txt.bz2 (or My Documents\Passwords\wordlist.txt.bz2 on Windows) and run the password generator with --alphabet 100 (restricting choices of "alphabets" to those with over 99 characters) and you'll get xkcd-style pass phrases. I also put some numbers in my word list, so I get passwords like blood Evil pint Urge occupy short railway 38 Diagram elbow Arrest 80 Ceremony monday salt sector It defaults to making the password/pass phrase length ceil(96 * log(2) / log(len(alphabet))) (96 bits of entropy). If you want to dial that up to 128 bits (or down to 80 bits), put { "bits" : 128 } in ~/Documents/Passwords/config.json (My Documents/Passwords/config.json on windows). [1]https://github.com/kmag/store_password_gpg https://github.com/kmag/store_password_gpg
- rocqua 10y ago
  Look at diceware for another great system to generate passwords.
  - KMag 10y ago
    Yes, I started out with a script that used the diceware wordlist to generate passwords and manually used gpg to store my passwords, then evolved my script to combine the two steps I was doing manually. Have a look at my script. It's all of 200 lines. Easy to audit, and I'm not doing any of my own crypto or random number generation.

Dylan16807 10y ago

And set the encryption to use pkcs8 with a million iterations.