How safe is using kde wallet?
 

I think that I'm posting to the correct forum that I shouldn't post it to software.

Using a lot of sites and many of them used for secure transactions it's difficult to remember all the passwords
especially if they are something like &#s$f*#h2878237j&a^$ and ofcourse not wanting to write them all down,
I've used quite a time kde wallet to store the passwords(KDE 3.5 currently) and I wonder what are the security risks
using wallet.

As long as you use a good password on KWallet, it's very secure. You might want to take a look at some Google results or possibly at this section of a KDE mailing list.

At least it's better than keeping your passwords in a plain text file or on a piece of paper (which will inevitably be read by someone else or be lost). :D

-jk

Then again pieces of paper won't ever get stolen over the internet and brute-forced... Nowdays it's ofcourse impossible to remember all the passwords :(

Yeh - I'm not saying pieces of paper are bad - if you can keep them locked up in a safe place then that's about as secure as you can get! For the everyday user however, KWallet is a perfect choice. :)

Cheers,

-jk

I've never used Kwallet so I can't tell you anything about it.
I use and I am very satisfied with Password Safe (Bruce Schneier Program) and Gorilla.
Password Safe runs on Windows (there is also a Java version) and Gorilla is a response to Password Safe which which runs on all types of OS.
Both programs use BlowFish for encrypting the plain text password file. They use a master password for encryption/decryption. You could define groups, sub-groups etc...
Gorilla and Password Safe are compatible to one another.

See them at:
http://www.fpx.de/fp/Software/Gorilla/
http://www.schneier.com/passsafe.html

You could do as I do and setup a GPG key then use the editor in KGPG to open and close an encrypted file with all your passwords/login names in it. Then you only have to remember the GPG passphrase when encrypting/decrypting the file to get the needed passwords/logins.

thanks everyone for replying
I will consider looking all your recommendations of using a safe password locking