5 ms·

I prefer to avoid placing my password store/database on the web in any form. I like to use KeePass + key file + long password on a thumb drive. [1] There are po

by rmxt 12y ago

I prefer to avoid placing my password store/database on the web in any form. I like to use KeePass + key file + long password on a thumb drive. [1] There are ports for pretty much every platform, and the Windows and Android ones that I've used are pretty convenient once you incorporate them. The Windows program offers a lock-screen reprompt, say if you are stepping away from your screen. Also, it offers the option of only using a key file, rather than entering a long password each time you access the database store. Lastly, the Windows version offers an auto-type keyboard shortcut that you can customize based on the window title in your browser (e.g. to match a specific webpage). It is susceptible to keyloggers, but at that point you might have other issues than your password stores being compromised. [1] http://keepass.info/help/base/keys.html http://keepass.info/help/base/keys.html

mikegioia 12y ago
I've been keeping my KeePass files in Dropbox but I like your idea to put it on a USB drive a lot better. The only downside is if you lose the USB drive; if you have one, what's your strategy for backing up the KeePass file?
- rmxt 12y ago
  That's the tricky part: I carry a USB drive which I make sure has the latest and most up to date file (for example, when I have to sign up on one-off online stores). Every so often I will manually back it up to laptop/desktop/cell phone/tablet. That's a minimum of five separate devices, and I'm not sure I'm ever carrying more than 3 of them at the same time. It's definitely not six-sigma, but I'll accept it for now I guess. Of course, all of this is in addition to service provided 2FA where applicable, e.g. Google, banks, web hosts, via SMS/Authenticator.
danesparza 12y ago
On OSX, a good open source project to check out is MacPass: https://github.com/mstarke/MacPass https://github.com/mstarke/MacPass It does a pretty good job of supporting the KDBX format.
- emsy 12y ago
  Thanks for the tip! KeepassX works great, but the author(s) don't seem to bother with pull requests and therefore useful features like keepasshttp or autotype won't get implemented. Keepass 2.x with mono never worked for me.
  - jimnutt 12y ago
    Autotype works just fine for me on KeePassX, do you have the latest version (2)? You also need the appropriate x utilities installed.
    - foobaer 12y ago
      Can you explain which appropriate x utitilies are needed? Tried that several times but never got that working.
WorldMaker 12y ago
Windows Pro-Tip: KeePass supports Windows' "Secure Desktop" (the same place where Windows UAC prompts launch into) for the reprompt. This really should be the default now, but it's simple to enable and incredibly worth enabling given that malware has been discovered in the wild trying to keylog/grab master passwords for programs like LastPass, 1Password and KeePass. Cross-Platform Pro-Tip: KeePass 2.x runs great as is on the Mono VM with only the obvious Windows-only functionality unavailable.
- deleted 12y ago
  [deleted]

by rmxt 12y ago

mikegioia 12y ago

I've been keeping my KeePass files in Dropbox but I like your idea to put it on a USB drive a lot better. The only downside is if you lose the USB drive; if you have one, what's your strategy for backing up the KeePass file?

rmxt 12y ago
That's the tricky part: I carry a USB drive which I make sure has the latest and most up to date file (for example, when I have to sign up on one-off online stores). Every so often I will manually back it up to laptop/desktop/cell phone/tablet. That's a minimum of five separate devices, and I'm not sure I'm ever carrying more than 3 of them at the same time. It's definitely not six-sigma, but I'll accept it for now I guess. Of course, all of this is in addition to service provided 2FA where applicable, e.g. Google, banks, web hosts, via SMS/Authenticator.

danesparza 12y ago

On OSX, a good open source project to check out is MacPass: https://github.com/mstarke/MacPass https://github.com/mstarke/MacPass It does a pretty good job of supporting the KDBX format.

emsy 12y ago
Thanks for the tip! KeepassX works great, but the author(s) don't seem to bother with pull requests and therefore useful features like keepasshttp or autotype won't get implemented. Keepass 2.x with mono never worked for me.
- jimnutt 12y ago
  Autotype works just fine for me on KeePassX, do you have the latest version (2)? You also need the appropriate x utilities installed.
  - foobaer 12y ago
    Can you explain which appropriate x utitilies are needed? Tried that several times but never got that working.

WorldMaker 12y ago

Windows Pro-Tip: KeePass supports Windows' "Secure Desktop" (the same place where Windows UAC prompts launch into) for the reprompt. This really should be the default now, but it's simple to enable and incredibly worth enabling given that malware has been discovered in the wild trying to keylog/grab master passwords for programs like LastPass, 1Password and KeePass. Cross-Platform Pro-Tip: KeePass 2.x runs great as is on the Mono VM with only the obvious Windows-only functionality unavailable.

deleted 12y ago
[deleted]