LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   Password management - how do you do it? (https://www.linuxquestions.org/questions/linux-security-4/password-management-how-do-you-do-it-655578/)

MasterOfTheWind 07-14-2008 01:59 AM

Password management - how do you do it?
 
Also, what kind of password storage program (if any) do you use?

Findus 07-14-2008 04:04 AM

I don't really use any password storage programs, only my head. The one program I use is the one built into KDE, and that is only for my WLAN passphrase.

- Findus

win32sux 07-14-2008 11:32 AM

I use my head as much as I can, and a hidden sheet of handwritten paper for the rest.

NetworkManager takes care of my WLAN password, though.

Cuetzpallin 07-14-2008 11:52 AM

usually I use my head to remember a list of passwords, but when I deplete my options I write to a hidden paper. LOL

anomie 07-14-2008 11:56 AM

Quote:

Originally Posted by MasterOfTheWind
Also, what kind of password storage program (if any) do you use?

Plain text password file + gnupg. I keep this in a secure place and decrypt it when I need to use an account.

simonapnic 07-14-2008 05:02 PM

Your head is the most secure place for storing a password I guess.
Using 'password management software' is not recommended if you are concerned about the security of your system(s).

KenJackson 07-15-2008 04:37 AM

Quote:

Originally Posted by anomie (Post 3214161)
Plain text password file + gnupg. I keep this in a secure place and decrypt it when I need to use an account.

Hey, that's what I do. But I use ccrypt instead of gnupg. Plus I have this function defined in ~/.bashrc:
Code:

function grepacct()
{
    test -n "$1"  &&  ccat ~/path/to/encrypted/file | grep $1 $2 $3
}

So if I forget, I can type this command and answer the password prompt to be reminded:
grepacct linuxques

JZL240I-U 07-15-2008 05:02 AM

Could you please translate that from bash to "plainspeech" ;)?

What I understood is: testing for an argument, if it's there ccat will pipe the contents of the (de-?)-crypted file to grep which will display the first three passwords?

But why do you call "grepacct linuxques"

Why don't you use Kwallet?

Randux 07-15-2008 06:09 AM

Keepass and KeepassX

brianL 07-15-2008 06:42 AM

In /skull/brain/cortex/memory/passwords.

pgroover 07-15-2008 07:32 AM

Keeping a limited amount of passwords is a great way to maintain them, but you should periodically change that set as well.

As for me, I keep them all in my head. That way, they're completely safe except for the alien mind probes... :)

FewClues 07-15-2008 08:56 AM

Quote:

Originally Posted by simonapnic (Post 3214453)
Your head is the most secure place for storing a password I guess.
Using 'password management software' is not recommended if you are concerned about the security of your system(s).

I am a retired IT and at my age nothing is safe stored in my head! When I was an active IT for a national bank I was responsible for 22 passwords and encrypted them on my PDA.

When I discovered that our encrypting modems could generate passwords from parse phrases I simply used the department name or function and allowed the modem to generate the password. Funny, once I did that I don't think I ever forgot a parse phrase or password.

I now find that all routers generate the passwords from parse phrases. So my system of passwords is still maintained by them. If I were to forget, and that's very possible at age 72, I simply re-enter "desktop" or "file server" into the router and let it spit out "0161e6dc1b" and my memory is refreshed.

mostlyharmless 07-15-2008 11:28 AM

Combination of all of the above! Some are common and reused on a rotating basis, then some are generated uniquely (it seems like every internet site wants you to setup an account).

One rather annoying "feature" of what I believe to be a flawed security model are the work related passwords that have to be changed every 90 days. It invites weak passwords and writing them down..

Some are stored in my head, but since I have over 40 passwords, some are kept encrypted on my PDA. Since it doesn't leave my person and since I don't work for the NSA, that seems adequate.

clint1986 07-15-2008 02:31 PM

I like to keep different passwords for different types of use. I have one password for anything to do with money, one for forums, one for system administration on computers (different for each machine) and so on. I find it is a comfortable compromise between keeping my passwords unique but also memorable by not using too many. :)

General Failure 07-15-2008 03:24 PM

I have to say I find this to be some very interesting conversation considering this is a login-based web forum ;)

I voted however - maybe I shouldn't have. Im starting to feel insecure :D

PS: Now I feel better. I changed my bookmark to https://www.linuxquestions.org. Hehe.


All times are GMT -5. The time now is 08:20 PM.