I'd want something that can live on the local box or in the cloud, preferably sync'd a la Evernote, Dropbox, etc.
And do either offer two-factor authentication ?
/lazy
Both
Yes
Both
AFAIK
=====================
It's funny how so many things assume only one user per device, and if there are two users, that they would want to always keep everything totally separate. Apple doesn't have any kind of scheme where the kids can have their own configuration in itunes for example that keeps the kids' playlists separate from mine, but uses my master account for purchases (that I would authorize). So everything's lumped into one big pile. I would create different users on the machine... that would work, but if we're chatting with grandma and I need to check something, we lose her. Or if one account is playing music, that stops when I go to look at facebook...
I have LastPass set up so that justine's login info is saved, and mine, but if I log out of FB, I can't easily force it to log me in as the other person. A combination of LP's memory and the browser storing the logins and it just goes back to whatever it was before. I'm sure I could make everything not remember any info then have lastpass log me in using the account I want, but that's pretty radical. Something (browser OR password manager OR website) should understand that I want to just go to a pull-down menu and switch to another user in Facebook without all the rigamarole of logging out, logging back in.
I am still using LastPass. The wife switched to DashLane and likes it much better. I might switch too.
Okay, I am not familiar enough with LastPass to know how it's going to shake out, but I think Dashlane wanted me to have a separate premium account for each of us. DashLane looks better but I'm trying to get it where it's easy to switch users. With LastPass I'm trying to set it up so that she can have her Facebook Login and I can have mine. Right now it looks like we have to use different browsers (which is how we've been handling it).
Does she use Dashlane on a mobile? With LastPass on the iPad, you have to launch the LastPass app, copy the password and paste it into the form in Safari or the FB app... once you've done it you're done... until you need to change PW again and that's the whole point.
Well I sprang for the Premium of LastPass. I think it'll be okay but there are quite a few things I'd like to discuss with their design team. They have an app for the iPad/phone etc but it doesn't actually work in the iPad's version of Safari, so you have to copy and paste the password. Which is okay but clunky. and their app has a browser. I guess that's okay but... Huh?
Anyway, they have a 60 day money back trial. If it's too annoying, I'll cancel and try DashLane. It promises it works better on all devices, somehow.
I am still using LastPass. The wife switched to DashLane and likes it much better. I might switch too.
Since the NSA revelations we have found out that there is no uncrackable password.
To clarify, strong passwords are highly resistant to decryption. However, even the strongest password is not resistant to "social engineering" attacks, as well as compromises resulting from insider knowledge or just plain sloppiness/carelessness on the art of IT security professionals.
Well I sprang for the Premium of LastPass. I think it'll be okay but there are quite a few things I'd like to discuss with their design team. They have an app for the iPad/phone etc but it doesn't actually work in the iPad's version of Safari, so you have to copy and paste the password. Which is okay but clunky. and their app has a browser. I guess that's okay but... Huh?
Anyway, they have a 60 day money back trial. If it's too annoying, I'll cancel and try DashLane. It promises it works better on all devices, somehow.
We have all our user names and passwords on a word document and just copy and paste whenever needed. Passwords can be as easy or as complicated as needed. We never let our puters remember for easy logins. The word document is buried pretty deep and does not have an obvious title like passwords for those that might make it into the network.
No worry about key logger stuff, no looking for sticky notes. Keep all the security question answers there as well. Can never remember upper or lower case and all that crap.
Been doing this for at least 8 or 9 years and it has worked very, very well.
Even have a separate user for surfing unknown or crazy places. Dump cookies and history before and after religiously. Have our own users for safe places like here so we don't have to dump stuff all the time.
Still doing this.
Since the NSA revelations we have found out that there is no uncrackable password.
Change them often. And one thing to add to my above post is that I keep all the old documents that have the passwords so there are multiple choices for the same account.
If someone would get into my computers, they have several choices to pick from. So with that in mind, I have another thing going for me that was unintended, but a huge benefit. Most places give you only three attempts to login successfully for a 24 hour period. I also will admit that I do not understand how all these password crackers that run the permutations can pound a login more than 3 times in a 24 hour period and still get in.
So, I've gotten most sites that I'm regularly using switched over to a mnemonic system for passwords. A sentence I can remember (actually one of 4), such as "Never give anyone your password!" Ngayp! followed by some letters from the URL Ngayp!RP which, with a longer sentence, would be pretty good. But I guess it's time to step it up and get a password manager. I've narrowed the choices down to
1Password
LastPass
DashLane
I guess RoboVault is also in consideration.
They all have similar capabilities, as far as I can tell. It looks like LastPass is the least expensive option altho I think they're all offering discounts right now because Heartbleed is making them rich.
Considering I have these requirements:
Multiple users on each iOS device,
Multiple browsers on each computer
Multiple users on each computer and
Low overall cost
...does anyone have any feedback on those apps?
It looks like LastPass will be least expensive but might be too geeky to get the family to use it? 1password is a one-time purchase but upgrades apparently are nearly as expensive as buying new and they kill support for older versions? Plus the desktop and iOS apps are separate purchases. DashLane is an annual subscription, and each user needs to pay?
This is why. This is why so many people just say "take my stuff."
scott it's almost like you read my mind
i use a similar method for passwords (a combo of a of the sentence/numeric methods)
that said i use xmarks so last pass is (or seems like) a natural fit for me (and i've toyed around with it)
i'm in the risk management business so i'm a little cautious/hesitant to have a "master key" versus "diversifying"
So, I've gotten most sites that I'm regularly using switched over to a mnemonic system for passwords. A sentence I can remember (actually one of 4), such as "Never give anyone your password!" Ngayp! followed by some letters from the URL Ngayp!RP which, with a longer sentence, would be pretty good. But I guess it's time to step it up and get a password manager. I've narrowed the choices down to
1Password
LastPass
DashLane
I guess RoboVault is also in consideration.
They all have similar capabilities, as far as I can tell. It looks like LastPass is the least expensive option altho I think they're all offering discounts right now because Heartbleed is making them rich.
Considering I have these requirements:
Multiple users on each iOS device,
Multiple browsers on each computer
Multiple users on each computer and
Low overall cost
...does anyone have any feedback on those apps?
It looks like LastPass will be least expensive but might be too geeky to get the family to use it? 1password is a one-time purchase but upgrades apparently are nearly as expensive as buying new and they kill support for older versions? Plus the desktop and iOS apps are separate purchases. DashLane is an annual subscription, and each user needs to pay?
This is why. This is why so many people just say "take my stuff."
And if the people who target the things you want to keep secure figure out that this is your MO, they will sooner or later successfully mount a social engineering attack by tricking tech support into sending them your temp password.
Oh ye of little humor...
First off, if they give it away, it's not my problem. Second, Big Business websites tend to be more for the benefit of the code monkeys who continually talk middle management into buying the latest expensive new "must have" toys. Customers like me are going back to 800 numbers because they're actually easier, faster, and a better source of details.
