Password managers any good?

[washingitagain]

Mr Pointy said:

It's fine to work that way if you're completely within the Google ecosystem but many users aren't & that's where a PWM comes in. If you want to make sure your family can access your paswords if you fall under a bus one day they need your master password though.

Good point.

[washingitagain]

sparkyhx said:

apart from google tracks everything, from the moment you fart getting out of bed to the last peck on the cheek you give your wife before falling asleep.

I don't have a problem with that because I get some fantastic services for 'free'. E.g. Maps - I often look back in my maps timeline to see what time I left somewhere if I'm, for example, visiting a different office and I can't remember my journey time. I won't derail the thread though!

[Newc]

budgie smuggler said:

jesusbuiltmycar said:

LastPass is owned and run by LogMeIn (annual revenue $1 Billion 2017)

See: https://en.wikipedia.org/wiki/LogMeIn

What makes you think they won't drop it? Google is a $10bn company, they drop stuff people depend on all the time.

Remote access, collaboration and password manager provider LogMeIn has been sold to a private equity outfit for $4.3bn.

https://www.theregister.co.uk/2019/12/18/log_me_in...

[Dracoro]

As someone who is in the church of Apple, I use the inbuilt keychain (which works with apps too now) but it is limited, however I have just found out that the Notes app has a password “lock” feature so I can store other info that needs securing.

With that in mind, is there any benefit of a password manager? Was considering LastPass as it’s free but with locked Notes I am not sure of the benefit???

[megaphone]

Dracoro said:

As someone who is in the church of Apple, I use the inbuilt keychain (which works with apps too now) but it is limited, however I have just found out that the Notes app has a password “lock” feature so I can store other info that needs securing.

With that in mind, is there any benefit of a password manager? Was considering LastPass as it’s free but with locked Notes I am not sure of the benefit???

My main issue with Apple Keychain is it's lack of a 'master' password, once you've logged into you Mac your passwords are all there and will offer autofill. I'd like the option of a second layer master password that is required to use a log-in or password. In my case I have a pretty simple account log-in as I'm too lazy to type in a complicated password, I log-in and out multiple times a day so need it easy.

Good point re Notes, I wish they would carry this across so I could lock a file or folder that I want securing, for instance my bank statement files.

Or maybe they do I and I can't find it!

[Funk]

Newc said:

budgie smuggler said:

jesusbuiltmycar said:

LastPass is owned and run by LogMeIn (annual revenue $1 Billion 2017)

See: https://en.wikipedia.org/wiki/LogMeIn

What makes you think they won't drop it? Google is a $10bn company, they drop stuff people depend on all the time.

Remote access, collaboration and password manager provider LogMeIn has been sold to a private equity outfit for $4.3bn.

https://www.theregister.co.uk/2019/12/18/log_me_in...

Ah crap, that's something to keep an eye on. I can't recall a company being flogged to a PE firm ever resulting in anything beneficial for users...

[megaphone]

Funk said:

Newc said:

budgie smuggler said:

jesusbuiltmycar said:

LastPass is owned and run by LogMeIn (annual revenue $1 Billion 2017)

See: https://en.wikipedia.org/wiki/LogMeIn

What makes you think they won't drop it? Google is a $10bn company, they drop stuff people depend on all the time.

Remote access, collaboration and password manager provider LogMeIn has been sold to a private equity outfit for $4.3bn.

https://www.theregister.co.uk/2019/12/18/log_me_in...

Ah crap, that's something to keep an eye on. I can't recall a company being flogged to a PE firm ever resulting in anything beneficial for users...

As a side note. An IT friend of mine has just dropped LogMein for his remote log-in use as they have hiked their prices, may all be related.

[bad company]

Bump. New LastPass user here.

I set the account up with their app on my iPad. I set up facial recognition which works fine. I’ve also downloaded the app on my iPhone but can’t get face recognition to work. I’ve gone through all the steps but it asks for my Master Password every time.

Is the face recognition only available on one device. If so does anyone know if I can change the primary device from my iPad to my phone?

Thanks .

[thebraketester]

I just use apple keychain. Works great across devices.

[megaphone]

thebraketester said:

I just use apple keychain. Works great across devices.

As I mentioned above, I wish they would have the option for a secondary master password. It is far too easy to leave a device open, means you need to have a super strong log in password and never let anyone else use your devices. Far too easy to 'auto-fill' passwords and log-ins.

[Horace Van Khute]

bad company said:

Bump. New LastPass user here.

I set the account up with their app on my iPad. I set up facial recognition which works fine. I’ve also downloaded the app on my iPhone but can’t get face recognition to work. I’ve gone through all the steps but it asks for my Master Password every time.

Is the face recognition only available on one device. If so does anyone know if I can change the primary device from my iPad to my phone?

Thanks .

All your passwords (including I'm assuming online banking and such) protected with face ID... You should switch off the attention options to make it even more secure haha.

[Mr Pointy]

thebraketester said:

I just use apple keychain. Works great across devices.

Not on my Android phone or my Dell PC it doesn't.

[fishseller]

Whats wrong in creating a zip folder on your desktop or upload to a cloud password protected then have a .txt doc with all the random complicated passwords for access to websites banks etc then zip that up in your password folder , when you got to a login to a site just copy and paste your password to avoid any keyloggers etc ?

[Mr Pointy]

fishseller said:

Whats wrong in creating a zip folder on your desktop or upload to a cloud password protected then have a .txt doc with all the random complicated passwords for access to websites banks etc then zip that up in your password folder , when you got to a login to a site just copy and paste your password to avoid any keyloggers etc ?

Because it's dumb way to work. A PWM works across your PC, laptop, Macbook, & Android phone whilst keeping everything synced. It can store all your important documents (eg travel insurance, will, etc) & allows your family/executor to access everything when you fall under a bus.

[s2kjock]

I see reference to 2 factor authentication for LastPass, but is this only available if you have the paid for version? I can't seem to see how you would access it otherwise.

[Mr Pointy]

s2kjock said:

I see reference to 2 factor authentication for LastPass, but is this only available if you have the paid for version? I can't seem to see how you would access it otherwise.

Yes, it's only available in the paid-for versions. I use a Yubikey.

[xeny]

Mr Pointy said:

Because it's dumb way to work. A PWM works across your PC, laptop, Macbook, & Android phone whilst keeping everything synced. It can store all your important documents (eg travel insurance, will, etc) & allows your family/executor to access everything when you fall under a bus.

Not all PWMs are cloud based - I use keepass, which is emphatically a PWM, but is most definitely not cloud based.

I decide where it does and doesn't get its password database sync'd to.

It has the advantage over fishseller's encrypted text file that it supports copying/pasting passwords into web forms without them being visible to shoulder surfers, as well as the usual automatic password generation, passwords in memory are encrypted so far as possible and if you want it browser integration.

[Mr Pointy]

xeny said:

Mr Pointy said:

Because it's dumb way to work. A PWM works across your PC, laptop, Macbook, & Android phone whilst keeping everything synced. It can store all your important documents (eg travel insurance, will, etc) & allows your family/executor to access everything when you fall under a bus.

Not all PWMs are cloud based - I use keepass, which is emphatically a PWM, but is most definitely not cloud based.

I decide where it does and doesn't get its password database sync'd to.

It has the advantage over fishseller's encrypted text file that it supports copying/pasting passwords into web forms without them being visible to shoulder surfers, as well as the usual automatic password generation, passwords in memory are encrypted so far as possible and if you want it browser integration.

I realise that, but you can geta lot more functionality out of the cloud based ones. Whichever you go for the main thing is to use one.

[xeny]

Mr Pointy said:

I realise that, but you can geta lot more functionality out of the cloud based ones. Whichever you go for the main thing is to use one.

That wasn't apparent from the post, and I didn't want anyone potentially mislead.

I concur, using one is a significant win over passwords scattered across word documents and paper notebooks.

[bad company]

I’m using Keychain for most web based passwords. I also store others such as email login details and bank logins on LastPass. Does that sound secure?

I was spooked last week when I looked in by email spam folder and saw a blackmail attempt with one of my passwords (now changed) as the subject line. So the criminal had the email address and a password. Scary.