Password managers

[Eric Oyen]

Too bad there isn’t an equivalent to apples keychain access. Through the cloud account, I can synch passwords among all my apple devices (can’t do so with either linux or windows. Then again, I use that utility as a backup for my brain. So far, I have 307 memorized passwords in my head. :)

Btw, here is the scheme (or it’t equivalent) that I use:

Take a profession or hobby, I will use tandem bicycling as a working example. Combine those into 1 word: tandembicycling and then use l337 on it, like thus: 74nd3m8!cyc1!n6

Now, for those sites I might want to be on (lets use www.4chan.org as an example) I will drop the www. And use the rest with l337 applied: Ach4n.0r6.

Now, I combine them:
74nd3m8!cyc1!n6Ach4n.0r6

Because I can keep the first part consistent and the second part is like a reminder from the site, you see how easy it gets to memorize so many. :) My password scheme is a bit more involved as I go with no less than 25 characters and include something within the site that most people won’t notice. Oh, and yes, don’t forget the use of capitals. With 95 available characters with lengths equal to or longer than 25 characters, these passwords can be very difficult to break under the best of circumstances. I should know, I tried once when I accidentally fat fingered a password on my old Mac. Took me 3 months to figure it out. The program I was using (Jack the Ripper) stated it would take some 138 trillion years give or take to solve it. Oh, and just for giggles, I got some time on a very large computing cluster designed to break huge passwords. After 6 months, they couldn’t break it.

Now, this is just a sample of what and how I do some things. The above isn’t the end result. I have since added 2 steps that make things even more complicated.

So, what do you think?

-Eric
From the Central Offices of the Technomage Guild, Esoteric Security tokens Dept.


> On Mar 8, 2021, at 9:49 AM, Michael Butash via PLUG-discuss <plug-discuss at lists.phxlinux.org> wrote:
> 
> Fun article I saw today.  I didn't even know Logmein was acquired by another VC troll to add to their bottom line.  https://arstechnica.com/gadgets/2021/03/demand-for-fee-to-use-password-app-lastpass-sparks-backlash/ <https://arstechnica.com/gadgets/2021/03/demand-for-fee-to-use-password-app-lastpass-sparks-backlash/>
> 
> I moved off them last year as my 5yr subscription finally ended.  I really liked them originally as revolutionary.  I bought it before Logmein bought them, and regretted it ever since as logmein is a scab of a company I already hate (no linux support, ever).  They've only now whored themselves out further to vulture capitalists since their video conference solution fell apart (or never evolved).
> 
> I'm still down with keepassxc, but I miss mobile sync for passwords.  I should probably try Bitwarden, but I expect some other sack o' crap will just acquire them eventually if they grow.
> 
> -mb
> 
> 
> On Wed, Feb 24, 2021 at 3:10 PM der.hans via PLUG-discuss <plug-discuss at lists.phxlinux.org <mailto:plug-discuss at lists.phxlinux.org>> wrote:
> Am 24. Feb, 2021 schwätzte pademc1 via PLUG-discuss so:
> 
> moin moin,
> 
> > I'm looking for a new password manager. I have been using LastPass.I
> > tried to upgrade to the paid version but I keep getting shut down.So,
> > what do you recommend? "Just because you got the monkey off your back
> > doesn't mean that the circus has left town."George Carlin
> 
> For web-based systems Bitwarden has a good reputation.
> 
> https://bitwarden.com/ <https://bitwarden.com/>
> 
> Nextcloud also has two password manager apps available.
> 
> https://Nextcloud.com/ <https://nextcloud.com/>
> 
> I believe all 3 allow you to share passwords with other people if you need
> that.
> 
> I have shared passwords via one of the Nextcloud apps for a project, but
> don't remember which I used.
> 
> I still prefer KessPass-based systems. I use KeePassXC on my system and
> KeePassDroid out of F-Droid on my phones. I have multiple KeePass files
> and only share some things on the phones.
> 
> https://KeePassXC.org/ <https://keepassxc.org/>
> 
> ciao,
> 
> der.hans
> -- 
> #  https://www.LuftHans.com <https://www.lufthans.com/>   https://www.PhxLinux.org <https://www.phxlinux.org/>
> #  "If you stop people installing their own software on systems they
> #  supposedly own then you are part of the problem, and whatever whining
> #  and marketing you do you share responsibility with the powers who abuse
> #  what you created." -- Alan Cox, 2017Jul31---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss at lists.phxlinux.org <mailto:PLUG-discuss at lists.phxlinux.org>
> To subscribe, unsubscribe, or to change your mail settings:
> https://lists.phxlinux.org/mailman/listinfo/plug-discuss <https://lists.phxlinux.org/mailman/listinfo/plug-discuss>---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss at lists.phxlinux.org
> To subscribe, unsubscribe, or to change your mail settings:
> https://lists.phxlinux.org/mailman/listinfo/plug-discuss

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.phxlinux.org/pipermail/plug-discuss/attachments/20210309/d7a449c2/attachment.html>