Hello all

Just a quick poll on how we organize our many passwords.

The poll will be multiple choices because some of us may use two or more ways.

My vote is a password manager which is keepassX

I have been very happy with keepassx.

For websites, forums and webmail i have a formula for deriving a password from the url. For my linux boxes, both of them have the same root password that i have memorized, and users have passwords derived from the distro name plus elements of the user name.

I really hope no-one chooses "in a mysql database".

Me? KeePassX on Windows and Linux, MiniKeePass (which is compatible with KeePass 1.x and 2.x) on iOS.

into my mind

Spreadsheet in a truecrypt volume.

I need to look at keepass again but when I looked before there were two different versions, one requiring .net/mono and the Android version was only compatible with one of the two. Has that been cleared up now, can I seny the password database between Linux and Android without needing wine/mono?

I'm using several things....I'm probably in the transition to keepass, but I haven't completely committed to that. For root, I've got a formula involving miss-spelt words and some non-alphabetic characters that may have been good enough when I came up with it 15 years ago, but I should change. (Think horse-battery-staple style with one fewer element, but with bad spelling and a formula using a number well known to me. I could tell you the number, and you wouldn't be that much closer, which means that it could be written on the machine without it helping you much. I won't though.)

Traditionally, I have used the browser for most random websites; I'm moving more of the new stuff to keepass, due to miscellaneous pains in unlikely places as sites change their log in pages and occasionally using multiple browsers and a feeling that I may be about to change prime browser. (I don't - won't - use any very obviously sensitive sites on-line, such as banking and financial sites, etc, largely because I don't trust the banking sites, rather my management of the passwords, but, if I did, I'd probably want to re-think this element as well.)

For local network login, I'm using network manager, which in turn uses kwallet.

In organisation, this is more of a mess than it probably should be, but there were good historical reasons for most of this at the time...

Whatever happened to memorizing your password ? Oh yeah most sites now puts lots of restrictions on passwords, so that makes it harder. Well, I memorize my passwords and I don't sign up to sites with excessively restrictive password criteria (github).

Restrictive in what way? I've seen a lot more sites support very lengthy passwords with almost any character combination. There are quite a few where your password requires capitals, symbols, or a minimum length. Once in a while I run across something where the password has a 8 character max, and symbols not allowed.

I keep mine in my head. I also very rarely let any app or website "remember my password". This does mean once in a great while I have to use the reset form.

Too many sites and passwords to keep track of unless you want to use the same few user names and passwords.
I used to store most in Firefox but they dropped support of sync servers so those won't sync down to my phone anymore so I need something else.

LastPass, it just works.

The usual requirement is minimum 8 characters, with at least one letter and one number.

Github and some other places now require at least one upper and lower case character. I cannot deal with this, because I can't memorize case. I suppose I could sign up, but it would take me a while to try the possible case combinations, and they'd probably lock me out before I got it right. So, I'm not signing up to such a site.

Can it sync across multiple systems?

LastPass syncs across all common platforms, including Android. I use it often. I still have a KeePass database, but I find that I use it less and less. There is no way I can keep all my passwords in my head. I have far too many to even try, unless I use the same one everywhere, and I won't do that. I have literally hundreds of passwords for all sorts of things, and a password safe of some sort is essential. I started using Keyring on Palm years ago, and have evolved to a combination of KeePassX, which uses the same database I had on Palm, greatly expanded of course, and LastPass, which I started using a couple of years ago. I use import/export to sync the databases periodically, to keep all the passwords available to both.

Wait, looking at the site it looks like its just a browser plugin so it doesn't actually sycn, its storing data on their servers.