[ubuntu-za] Security - passwords

[Henk Joubert]

Hi Leon

I use keepassx and dropbox to sync the database file to my mobile. Assuming
I don't lock myself out of dropbox or my encrypted database (which is
replicated on multiple machines) I don't have problems.

The problem with a sheme based system like hashpass or cryptnos is that it
works great up until you run into arbitrary password requirements. Must be
8 to 12 characters and contain a heiroglyph sound familiar? Now you're back
to keeping a note somewhere about what 'trick' you used to coerce your
scheme into fitting. Also some services will change name (and domain) which
is commonly used as a source to generate your passwords.

One caveat with keeping keepass synced over dropbox is that it's rather
painful to add new credentials on a mobile device. Much better to only use
mobile in an emergency lookup situation.



On 2 December 2014 at 17:41, Leon Gert Marincowitz <lmarincowitz at gmail.com>
wrote:

> Hi all
>
> Sometime this year I moved all my passwords to keypassx. Which is great
> when I'm on my Ubuntu laptop. Not so great when on my android-having to
> Bluetooth the encrypted file to myself.
>
> But late last week I had a security crises where I couldn't get into a
> crucial account as I had forgot to send myself the updated file.
>
> Now I'm thinking that a physical file is perhaps not the best way to
> manage passwords across multiple devices.
>
> So, here's a quick poll on what does everyone consider to be the best
> security as in password management.
>
> Does anyone use password manages such as last pass or the like, keypassx,
> or something new I've found recently called hash passwords.
>
> Anyone has experience in this regard or would like to share their
> thoughts?
>
> Regards
>
> Leon G. Marincowitz
>
> Apologies for brevity, sent from smartphone
>
> --
> ubuntu-za mailing list
> ubuntu-za at lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/ubuntu-za
>
>


-- 
Henk Joubert
BSc Computer Science (Hons) | University of Cape Town 2012
jouberthenk at gmail.com | 0836382339
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-za/attachments/20141202/6dc85dfc/attachment.html>