Tagged Questions
20
votes
2answers
1k views
Does versioning an encrypted file make it less secure?
Suppose I use KeePassX as a password manager, and I store the kdb file in Sparkleshare folder as a way for backing up and syncing with multiple devices.
The kdb file in itself would be encrypted, but ...
5
votes
4answers
247 views
Do honeywords add any real security?
This paper proposes the concept of honeywords for detecting if a password database has been compromised.
As far as I understand it works like this:
You save n password hashes for each user, one that ...
4
votes
1answer
151 views
Saved passwords (use case)
I have a program in which a user enters a password, and the user data is stored encrypted using AES-128. The data and passwords must be stored together.
Both the data and the password are encrypted ...
-4
votes
1answer
141 views
Secure Web application Password vault/manager [duplicate]
I would like to build an open source online password vault which allows users to securely store their passwords, like Keepass or roboform, but where a user can access their passwords through a ...
9
votes
1answer
237 views
Reversible, recoverable user data encryption scheme
From this earlier question, I have a general need to obfuscate a set of third-party credentials stored in a user account, which are then used in an internal Winforms software client. The scheme from ...
1
vote
3answers
245 views
Should I use a Firefox master password or NTFS encrypt my profile?
As a follow-up to another question, is the encryption via Firefox' master password more secure than simply NTFS encrypting the profile folder? I.e. is there a convincing reason to add the ...
3
votes
2answers
920 views
Storing password in Java application
What is best secure way to store passwords in Java web application?
I am not talking about password to the DB, so it must be stored in de-cryptable way. It’s cloud environment and I need to protect ...
12
votes
6answers
2k views
Is TrueCrypt safe enough to store clear-text-passwords?
The reason: I want to be able to use a portable USB drive to access my passwords on any machine and OS. TrueCrypt seems to be the only program that has sufficient support on all major platforms. So I ...
1
vote
3answers
193 views
Logic for generating Strong Password?
I try to encrypt password using MD5 but there are decoders for MD5. So I'm worried about encryption of password for big website.
Is there any logical suggestion or step function to generate strong ...
-2
votes
1answer
197 views
What encryption hash function I should use for password securing? [duplicate]
Possible Duplicate:
How to securely hash passwords?
What is the best encryption algorithm? MD5, SHA1, SHA2 or maybe something else? Can you explain me why?
4
votes
11answers
3k views
Definitely safest password storage scheme?
I already asked this on StackOverflow but I was suggested this would be a better suited place and I found no way to "move" the question so I have to copy it.
Believe, I know, there are hundreds ...
1
vote
1answer
239 views
Should I mount my mac Truecrypt Volume elsewhere?
I've read in various places to not mount your truecrypt volume in the same place as your Dropbox or Sugarsync folder. I believe this only matter for Mac/Linux, but I need some verification.
On a Mac, ...
21
votes
5answers
1k views
Do spaces in a passphrase really add any more security/entropy?
I often see passphrase suggestions written as a sentence, with spaces. In that format are they more susceptible to a dictionary attack because each word is on it's own as opposed to a large unbroken ...
3
votes
1answer
224 views
HP ProtectSmart In A Domain?
All of our HP PCs come with this software pre-installed, I'm a bit inclined to outright remove it because:
Credential manager stores passwords by default (this has lead to user confusion, plus ...
4
votes
1answer
436 views
Android for the Paranoid
In the case of a rooted phone, what are the various options to stay anonymous and keep your data secure? I've seen the guys at The Guardian Project work towards this: ...
5
votes
6answers
354 views
What is the use of password encryption?
Why do we encrypt passwords? Is it to protect the password from eavesdropping? to protect the password after saving it in database? both? or for some other reason?
19
votes
3answers
811 views
Am I wrong to believe that passwords should never be recoverable (one way hash)?
I recently forgot my password for our cable provider online account, only to discover that they sent it to us via plain text in an email. I quickly sent an email to customer support asking them if ...
