4 ms·

Another Schneier recommendation is to write your passwords down, just keep the piece of paper away from people who might misuse it: http://www.schneier.com/blo

by m0nty 17y ago

Another Schneier recommendation is to write your passwords down, just keep the piece of paper away from people who might misuse it: http://www.schneier.com/blog/archives/2005/06/write_down_your.html http://www.schneier.com/blog/archives/2005/06/write_down_you... I have about 30 unique passwords which I keep in an encrypted file, and a password for "everything else". I have about six passwords I can remember off the top of my head and two of these concatenated are used to unlock the encrypted file. I would seriously recommend doing something like this: you'll feel much happier, I promise.

weaksauce 17y ago
Have you tried KeePassX or passwordsafe? passwordsafe was actually created by Schneier with twofish encryption. see: http://www.schneier.com/passsafe.html http://www.schneier.com/passsafe.html or if you are on OS X or windows: http://www.keepassx.org/ http://www.keepassx.org/ Use it with dropbox and it is available anywhere you are.
- dustmop 17y ago
  Also, Password Gorilla, which is java and runs everywhere and is compatiable with passwordsafe's databases. I do what Joel recommended, keeping the db in Dropbox so that newly added passwords are replicated and up to date.
- m0nty 17y ago
  I already use Dropbox so I'll give it a try.
nas 17y ago
I have an unencrypted file for low security passwords (e.g. web sites that require passwords). I use something like pwsafe for high security passwords. Whenever I create a new password now it is randomly generated. I don't reuse passwords between sites. I use the phrase idea suggested in the article (full phrase though) for my GPG and pwsafe passwords.
crcoffey 17y ago
Can I ask what kind of document or method of encryption you use for your passwords?
- m0nty 17y ago
  TrueCrypt.