What your idea to remebr your many passwords?

[BAHayman]

I used splash id until now, recently switched to msecure very very nice and stable.
I would never ever store all this in one place it on any cloud service, not even to sync with dropbox, last thing I need is some hacker to hack into dropbox servers and expose my info just for fun like they did with the Apple Id's just recently.
Anonymous group can get anywhere, yes even the big smart Israeli defense system got to know their capabilities recently.

Anyhow back on topic, msecure and slash id both have android iPhone and desktop apps, I sync only on same network, so I have it on my desktop in case I loose my phone, and its not exposed to the cloud.

Any expert will advise you the same, do not post host etc anything on the cloud, not even on gmail.

With lastpass your passwords are encrypted locally with your master password before being sent to the lastpass servers.

[Wolf]

With lastpass your passwords are encrypted locally with your master password before being sent to the lastpass servers.

Right that's what msecure claims they do if you choose to sync with dropbox, but you really think there aren't people who can hack these things think again, if not now they will be able to in the future, if they can hack Apple system to steal id's they can hack 256 blowfish encryption too, even though they claim no one ever hacked it.

Remember that Brute-force can be used everywhere, they're no protection against it. If it ain't in the cloud they can't hack it, no matter if you have a password or not.
Be smart be protected....

[SuperFlyer]

Remind me where the israelis got hacked.
Not talking about a few local stupid websites.

[SuperFlyer]

And with hacked I mean: damage inflicted, not just a frontend change or so.

[HelpMe]

Still using RoboForm.

[Wolf]

Remind me where the israelis got hacked.
Not talking about a few local stupid websites.

this link I think does not call the attacks local stupid websites,
http://rt.com/news/anonymous-israel-officials-leaked-002/

[rots5]

for mt desktop i use my mind/saved passwords sadly enough
and for the iphone i use keeper - its decent but not great

[BAHayman]

Right that's what msecure claims they do if you choose to sync with dropbox, but you really think there aren't people who can hack these things think again, if not now they will be able to in the future, if they can hack Apple system to steal id's they can hack 256 blowfish encryption too, even though they claim no one ever hacked it.

Remember that Brute-force can be used everywhere, they're no protection against it. If it ain't in the cloud they can't hack it, no matter if you have a password or not.
Be smart be protected....

Your right that everything can be brute forced, but that would only be one person at a time. Meaning someone would have to really want to get my passwords to spend all that time and money to brute force a 40+ character alpha numeric password with no words from the dictionary in it (and on top of that I've got my Key Iterations set to 25000) . Now it would be much much easier for them to just hack the individual websites which they are trying to get my password to, or better yet just install a keylogger on my local machine.

And no I honestly do not believe that an exploit has been found for AES encryption as of yet.

[Wolf]

And no I honestly do not believe that an exploit has been found for AES encryption as of yet.

your right with all the above, but if you have an alternative why should you host it on cloud.
Also how can you be sure that one of their employees won't go crazy and sell your info to someone,?
And don't tell me now that they can't access your data.

[BAHayman]

your right with all the above, but if you have an alternative why should you host it on cloud.
Also how can you be sure that one of their employees won't go crazy and sell your info to someone,?
And don't tell me now that they can't access your data.

It's all about a tradeoff between convenience and paranoia. I used to use keepass inside of TrueCrypt synced over dropbox but in the end the convenience of lastpass won me over. But your right, if an offline solution works then by all means go for it.

If by data you mean passwords then no they do not have access to them. They only transmit the encrypted versions of your passwords to themselves as well as a hashed version of the master password so they can authenticate you. But that hash cannot be reversed so they cannot decrypt the passwords.

[AJK]

I currently use keepass and have been debating about using dropbox to wirelessly sync.

Why'd you switch to lastpass specifically? Can you use it on iOS?

[DH Data Recovery]

Did you guys ever try RoboForm? I rely on it fr all my password and to automatically fill my cc info you can choose multiple logins etc its great!

[HelpMe]

Did you guys ever try RoboForm? I rely on it fr all my password and to automatically fill my cc info you can choose multiple logins etc its great!

Still using RoboForm.

[smurf]

Did you guys ever try RoboForm? I rely on it fr all my password and to automatically fill my cc info you can choose multiple logins etc its great!

Can it sync across multiple browsers and devices?

[elikay]

Did you guys ever try RoboForm? I rely on it fr all my password and to automatically fill my cc info you can choose multiple logins etc its great!

How's it different than lastpass

[LeeW]

Many people are using a program that securely stores passwords for them. If you have nay experience with using one please post. I am currently using dashlane https://www.dashlane.com/en/cs/3b9af331 and I find it easy to use and install and it is free. It works across all platforms. I am very happy with it. If you are using a different service let me know!

[yuneeq]

Many people are using a program that securely stores passwords for them. If you have nay experience with using one please post. I am currently using dashlane https://www.dashlane.com/en/cs/3b9af331 and I find it easy to use and install and it is free. It works across all platforms. I am very happy with it. If you are using a different service let me know!

I've seen other threads about this already. I'm using LastPass works great, though gets annoying sometimes.

[jaywhy]

+1 for Lastpass.
Locally encrypted and salted hashes, supports virtually every browser on any platform, mobile apps for every OS, free credit monitoring, two factor authentication with a grid printout backup, and awesome support.
Only con is that the UI is very clunky... Worth it for the security though.

[Yo ssi]

What's the best free solution that allows one to store 2FA?

I'm thinking I got to self host bitwarden

[lcm]

What's the best free solution that allows one to store 2FA?

I'm thinking I got to self host bitwarden

Auth is platform agnostic (not Microsoft or Google), and allows multiple devices being logged in