Tag Info

Hot answers tagged

5

I agree with Mike Scott's comment that it's best to use something which is already open-source which has gone through all the research and so on. If your doing the project for learning and personal usage then start off with basics such as: If you support clipboard don't forget to clear it during application been closed or after a set time period. Don't ...


4

It's often still used for sensitive, powerful accounts on systems to which administrators even only get limited access. The password is created and stored by the security officer often and stored in a safebox which often requires more than one person to open. The accounts are mostly not used frequently and only in case of emergency.


3

The Pros of a Password Manager: Reduces the friction for maintaining unique, strong random passwords for each application that requires them. Centralized account management in a digital form means that it's more portable, and easily backed up. Integrated tools for creating unique, strong random passwords means that you don't have to worry about ...


2

One advantage of the "envelope in a safe" method is that you can make use of Bruce Schneier's observation that society already has many well established and effective methods for securely storing small pieces of paper. In particular, there is an effortless process for securely doing an off-site back up to a trusted third party, namely putting another copy ...


2

There are still people who use both options with benefits to either. One thing to keep in mind is that there are a variety of threats that are dependent on password strength rather than someone actually finding your passwords on paper. The 'Safebox': Lets break this down into a few traditional 'safeboxes'. A Wallet - This method provides some security in ...


1

The hostnames hr.company.com and testing-apps.hr.company.com will not cause proper browser security model segregation - it is possible for hr.company.com to set cookies than can be read by testing-apps.hr.company.com and testing-apps.hr.company.com will be able to set cookies on the hr.company.com domain. So you have to trust both hr.company.com and ...


1

Password management tools like Lastpass are storing your data on their servers which is what lead to their huge vulnerability earlier this year. While Lastpass may be great to use for home based machines, enterprise password managers do exist, and should reside in your infrastructure. There will be some who will debate: "the cloud is just as safe" to which I ...


1

Passwords can be easy to forget. can be easy to guess / crack. can have different contraints in terms of characters you can use, length... are very often re-used on different services. have you heard of those passwords database leaked? Challenge-Response can comprise any amount of challenges (e.g. enter 3 passwords in a row) can support one-time ...


1

You can try pasting it into notepad, print it out, then enter it manually into android. If its like 100 characters long, this is one good reason for why you may want to make it shorter. I asked a question about how long is too long, and after 22 characters a password stop making sense. I have the same issue. My windows account and iTunes passwords I ...



Only top voted, non community-wiki answers of a minimum length are eligible