Linked Questions
22 questions linked to/from How safe are password managers like LastPass?
8
votes
5
answers
7k
views
A password manager a single point of failure. Then why is it so often recommended nowadays? [duplicate]
The conclusion of this article is that to protect passwords in 2017, you need length and randomness. It recommends giving up all little hacks and techniques like turning "o" into 0 in favor of picking ...
- 81
4
votes
6
answers
1k
views
Methods for remembering passwords around the web [duplicate]
What's the least painful way to manage passwords for user accounts that you have on various sites?
I see only 3 options:
Password manager. Passwords can be different and strong, but the downside is ...
- 43
-3
votes
1
answer
451
views
Is it secure to use Lastpass to save my passwords? [duplicate]
I am a Premium user of Lastpass app and I love it, but I don't know how safe is it to put all my passwords in the cloud?
88
votes
15
answers
34k
views
How to store passwords written on a physical notebook?
Answers to the question "How safe are password managers like LastPass?" suggest that storing personal passwords on a physical notebook might be a reasonable option:
I know someone who won't use ...
- 1,109
62
votes
12
answers
51k
views
How long should the maximum password length be?
The minimum password length recommended is about 8 characters, so is there any standard/recommended maximum length of the password?
- 1,404
34
votes
11
answers
12k
views
Password Management within an Organisation
Within an organisation there are many passwords such as those for root accounts on servers, hosting accounts, router logins and other such things, that need to be kept track of.
I know in some ...
- 9,517
13
votes
5
answers
8k
views
Defense against attacks using dictionaries
Some forms of attacks on passwords use dictionaries. It is safer to use nonsense passwords like YunSUanLin, Artibichoke, etc., which do not seem to pertain to any dictionary?
- 131
11
votes
3
answers
4k
views
Safe storage for multiple passwords for multiple accounts
I've had this difficulty for a while, and I hope to get some feedback or referral to the sites where this problem may be discussed.
Nowadays all of us have multiple accounts, both personal and work-...
- 107
16
votes
8
answers
3k
views
Password management/synchronization?
Is there a good enough service I could run on my own home (Linux) server that I could use for storing/accessing/synchronizing passwords so they could be available for me from multiple computers/places?...
- 3,392
16
votes
1
answer
3k
views
Is BitWarden trusted?
I've been using BitWarden as my main password keeper, would like to ask if it's safe? I know that everything is not 100% safe but still want to know if they are worth it.
All my passwords are ...
- 161
4
votes
4
answers
2k
views
Password managers with U2F security risks
After a lot of research about password manager and a lot of reference obtained from this discussion
How safe are password managers like LastPass?
I come to the conclusion that password managers have ...
- 43
3
votes
4
answers
1k
views
Mitigating the problem of single point of failure introduced by password managers
I understand the purpose of password managers and the fact that there seem to be a trade-off to accept, but well, I find that trade-off to be unacceptable and I wonder if there's a way to avoid it. A ...
- 15.9k
6
votes
2
answers
953
views
LastPass login security
If LastPass does not store your master password, then how can you login to use their web app?
Surely you must type it in, it is sent over using SSL, and then salted/hashed on the server-side, and ...
- 417
0
votes
2
answers
1k
views
As a user, is using MD5-encrypted passwords on websites a good practice? [duplicate]
Disclaimer: This is from a user standpoint. We'll thus assume the target website (say, Paypal or Netflix) already uses a strong hashing algorithm with salts (bcrypt of pbkdf2, for example) and accepts ...
- 233
2
votes
2
answers
2k
views
Do cloud-based password managers invalidate even the most secure architecture?
Can an online password vault, like LastPass, be defended through a security assessment that demonstrates the value they provide outweighs the risks of being a high value target?
A valid answer should:...
- 131
8
votes
2
answers
846
views
Protecting my high-value passwords against offline attacks
Summary
I'm a LastPass user, but I have concerns about storing high-value passwords, like my bank password, online. I've read some posts on this topic but still have questions.
How safe are ...
- 81
1
vote
2
answers
874
views
What are the security risks associated with storing passwords on the internet?
With products such as LastPass that store encrypted passwords on remote servers, what are the associated risks that aren't applicable to locally stored and encrypted passwords? If something is ...
- 10.2k
1
vote
2
answers
377
views
What is Byzantine password system?
How safe are password managers like LastPass?
One comment there asks:
Does anyone know of any Byzantine password systems? E.g. 3 or 5 online
systems, where breaking any single system would not ...
- 139
2
votes
3
answers
287
views
password complexity and policies from the users' point of view [duplicate]
There are two sides of password complexity, the administrator's side and the users' side. They are effectively disjointed requirements. Good complexity and policies of passwords are discussed often. ...
- 471
0
votes
3
answers
258
views
One Less Password
I just came across this:
https://blog.webmaker.org/one-less-password
Basically a technique for eliminating passwords as the primary authentication mechanism for connecting to a website by replacing ...
- 101
2
votes
1
answer
103
views
Security Protocols for a Blog [closed]
What are some security protocols that I should be aware of when starting and running a personal blog? I am steering away from WordPress and will another hosting service.
The blog will mainly just be ...
0
votes
0
answers
49
views
Should I use a Password manager or just use different passwords? [duplicate]
Reading this article on the BBC titled: Password guru regrets past advice
It advises that people now use Password Managers:
It recommended that organisations abandoned a policy of pushing their
...
- 3,041