Linked Questions
22 questions linked to/from How safe are password managers like LastPass?
8
votes
5
answers
7k
views
A password manager a single point of failure. Then why is it so often recommended nowadays? [duplicate]
The conclusion of this article is that to protect passwords in 2017, you need length and randomness. It recommends giving up all little hacks and techniques like turning "o" into 0 in favor of picking ...
- 81
4
votes
6
answers
1k
views
Methods for remembering passwords around the web [duplicate]
What's the least painful way to manage passwords for user accounts that you have on various sites?
I see only 3 options:
Password manager. Passwords can be different and strong, but the downside is ...
- 43
-3
votes
1
answer
451
views
Is it secure to use Lastpass to save my passwords? [duplicate]
I am a Premium user of Lastpass app and I love it, but I don't know how safe is it to put all my passwords in the cloud?
88
votes
15
answers
34k
views
How to store passwords written on a physical notebook?
Answers to the question "How safe are password managers like LastPass?" suggest that storing personal passwords on a physical notebook might be a reasonable option:
I know someone who won't use ...
- 1,109
62
votes
12
answers
51k
views
How long should the maximum password length be?
The minimum password length recommended is about 8 characters, so is there any standard/recommended maximum length of the password?
- 1,404
34
votes
11
answers
12k
views
Password Management within an Organisation
Within an organisation there are many passwords such as those for root accounts on servers, hosting accounts, router logins and other such things, that need to be kept track of.
I know in some ...
- 9,517
13
votes
5
answers
8k
views
Defense against attacks using dictionaries
Some forms of attacks on passwords use dictionaries. It is safer to use nonsense passwords like YunSUanLin, Artibichoke, etc., which do not seem to pertain to any dictionary?
- 131
11
votes
3
answers
4k
views
Safe storage for multiple passwords for multiple accounts
I've had this difficulty for a while, and I hope to get some feedback or referral to the sites where this problem may be discussed.
Nowadays all of us have multiple accounts, both personal and work-...
- 107
16
votes
8
answers
3k
views
Password management/synchronization?
Is there a good enough service I could run on my own home (Linux) server that I could use for storing/accessing/synchronizing passwords so they could be available for me from multiple computers/places?...
- 3,392
16
votes
1
answer
3k
views
Is BitWarden trusted?
I've been using BitWarden as my main password keeper, would like to ask if it's safe? I know that everything is not 100% safe but still want to know if they are worth it.
All my passwords are ...
- 161
4
votes
4
answers
2k
views
Password managers with U2F security risks
After a lot of research about password manager and a lot of reference obtained from this discussion
How safe are password managers like LastPass?
I come to the conclusion that password managers have ...
- 43
3
votes
4
answers
1k
views
Mitigating the problem of single point of failure introduced by password managers
I understand the purpose of password managers and the fact that there seem to be a trade-off to accept, but well, I find that trade-off to be unacceptable and I wonder if there's a way to avoid it. A ...
- 15.9k
6
votes
2
answers
953
views
LastPass login security
If LastPass does not store your master password, then how can you login to use their web app?
Surely you must type it in, it is sent over using SSL, and then salted/hashed on the server-side, and ...
- 417
0
votes
2
answers
1k
views
As a user, is using MD5-encrypted passwords on websites a good practice? [duplicate]
Disclaimer: This is from a user standpoint. We'll thus assume the target website (say, Paypal or Netflix) already uses a strong hashing algorithm with salts (bcrypt of pbkdf2, for example) and accepts ...
- 233
2
votes
2
answers
2k
views
Do cloud-based password managers invalidate even the most secure architecture?
Can an online password vault, like LastPass, be defended through a security assessment that demonstrates the value they provide outweighs the risks of being a high value target?
A valid answer should:...
- 131