I wish to reduce the barrier of entry to a more secure method of generating/storing passwords. The main stumbling block for anyone I have spoken to, or tried to convince to switch to a password database is not necessarily complexity, but perceived complexity.
I have so far convinced some people to avoid re-using passwords, and pointed out resources on creating stronger passwords, or providing instruction myself on how to do so. This now leaves the problem of storing these passwords securely.
Taking into account:
- Memorising all passwords is not possible.
- Storing all passwords written down, and secured is not possible either.
Are there any common methods, or best practices, for enabling users who lack technical expertise to safely store passwords?
Edit: My previous version of this question was put on hold as being a product request, this would be correct as I was looking for an encrypted text file "database". I'm repeating the requirements laid out there as it keeps the basis for @Craig's answer, and an outline of how simple my requirements were.
My ideal would have extremely limited functionality:
- Requires a pass-phrase to open/decrypt the 'database' file.
- Upon the database opening, the user is simply presented with a plain text editor.
- Minimal settings immediately apparent in the user interface.
- A one-click password generator, with 'sensible' defaults.
- Windows support is a must, cross platform beneficial, but not a requirement.