# Recommend a password manager please

**URL:** <https://boards.straightdope.com/t/recommend-a-password-manager-please/678244>\
**Category:** In My Humble Opinion\
**Created:** [January 8, 2014, 4:20am UTC](https://boards.straightdope.com/t/recommend-a-password-manager-please/678244 "2014-01-08T04:20:27Z")\
**Posts on this page:** 20\
**Page:** 2

<div class="post-metadata">

**Author:** ![AaronX](https://avatars.discourse-cdn.com/v4/letter/a/7bcc69/32.png) [@AaronX](https://boards.straightdope.com/u/AaronX)\
**Post date:** [January 9, 2014, 12:35am UTC](https://boards.straightdope.com/t/recommend-a-password-manager-please/678244/21 "2014-01-09T00:35:02Z")

</div>

> [@Just\_Ed](#):
>
> I’m not sure what you mean by multiple databases. With LastPass, you can sort your logins into folders much like you would for bookmarks, but I don’t know if that suits your purposes.

I mean having different sets of passwords with separate master passwords, that can be backed up independently.

---

<div class="post-metadata">

**Author:** ![John\_Mace](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/john_mace/32/185_2.png) [@John\_Mace](https://boards.straightdope.com/u/John_Mace)\
**Post date:** [January 9, 2014, 1:08am UTC](https://boards.straightdope.com/t/recommend-a-password-manager-please/678244/22 "2014-01-09T01:08:04Z")

</div>

LastPass sounds pretty good. I’ve been using PieceOfPaperHiddenInMyDesk, but that’s probably not as secure.

---

<div class="post-metadata">

**Author:** ![levdrakon](https://avatars.discourse-cdn.com/v4/letter/l/49beb7/32.png) [@levdrakon](https://boards.straightdope.com/u/levdrakon)\
**Post date:** [January 9, 2014, 1:40am UTC](https://boards.straightdope.com/t/recommend-a-password-manager-please/678244/23 "2014-01-09T01:40:06Z")

</div>

I’m trying Lastpass right now. I went to change my password for the dope and it decided my email address was my login and saved it that way. When I logged out & tried to log back in it kept autofilling my email address in the login portion, and every time I’d delete that and change it to my login, it’d autofill again. Burned through 4 of my 5 attempts before getting it right. Hopefully I fixed it now.

---

<div class="post-metadata">

**Author:** ![Just\_Ed](https://avatars.discourse-cdn.com/v4/letter/j/e19b73/32.png) [@Just\_Ed](https://boards.straightdope.com/u/Just_Ed)\
**Post date:** [January 9, 2014, 3:11am UTC](https://boards.straightdope.com/t/recommend-a-password-manager-please/678244/24 "2014-01-09T03:11:10Z")

</div>

> [@AaronX](#):
>
> I mean having different sets of passwords with separate master passwords, that can be backed up independently.

In that case LastPass is probably not for you. Although you can backup the database (using LastPass Pocket), the concept (indeed the name) comes from the “last password” you’ll ever need; there is only one master password for your entire database. It would probably be possible to create two different accounts with different master passwords, but then you’d be paying twice if you wanted premium features for both.

As far as the functionality of the add-on, I’ve used it in both Firefox and Chrome, and don’t see how it could be easier. There might be a couple of settings you’d want to tweak, but it really is dead simple.

---

<div class="post-metadata">

**Author:** ![TonySinclair](https://avatars.discourse-cdn.com/v4/letter/t/49beb7/32.png) [@TonySinclair](https://boards.straightdope.com/u/TonySinclair)\
**Post date:** [January 9, 2014, 3:14am UTC](https://boards.straightdope.com/t/recommend-a-password-manager-please/678244/25 "2014-01-09T03:14:22Z")

</div>

> [@levdrakon](#):
>
> You might try checking this url: [https://lastpass.com/change\_ver.php](https://lastpass.com/change_ver.php)

Your check is in the mail. Thanks.

---

<div class="post-metadata">

**Author:** ![levdrakon](https://avatars.discourse-cdn.com/v4/letter/l/49beb7/32.png) [@levdrakon](https://boards.straightdope.com/u/levdrakon)\
**Post date:** [January 9, 2014, 3:32am UTC](https://boards.straightdope.com/t/recommend-a-password-manager-please/678244/26 "2014-01-09T03:32:15Z")

</div>

After being away for a 10 or 15 minutes I clicked on the dope only to have to log in again. First attempt wrong autofill again and back to 1 of 5 attempts. Second time I had to carefully select my log in from a drop down, then carefully select my password from a drop down, then hope it works.

Sheesh, Chrome never makes me do that. Pain so far.

---

<div class="post-metadata">

**Author:** ![Leaper](https://avatars.discourse-cdn.com/v4/letter/l/4bbf92/32.png) [@Leaper](https://boards.straightdope.com/u/Leaper)\
**Post date:** [January 9, 2014, 4:02am UTC](https://boards.straightdope.com/t/recommend-a-password-manager-please/678244/27 "2014-01-09T04:02:00Z")

</div>

I just use the one in Firefox.

---

<div class="post-metadata">

**Author:** ![AaronX](https://avatars.discourse-cdn.com/v4/letter/a/7bcc69/32.png) [@AaronX](https://boards.straightdope.com/u/AaronX)\
**Post date:** [January 9, 2014, 7:51am UTC](https://boards.straightdope.com/t/recommend-a-password-manager-please/678244/28 "2014-01-09T07:51:50Z")

</div>

> [@Just\_Ed](#):
>
> In that case LastPass is probably not for you. Although you can backup the database (using LastPass Pocket), the concept (indeed the name) comes from the “last password” you’ll ever need; there is only one master password for your entire database. It would probably be possible to create two different accounts with different master passwords, but then you’d be paying twice if you wanted premium features for both.
> 
> As far as the functionality of the add-on, I’ve used it in both Firefox and Chrome, and don’t see how it could be easier. There might be a couple of settings you’d want to tweak, but it really is dead simple.

Ah you’re right, I want more control over my databases.

---

<div class="post-metadata">

**Author:** ![Crotalus](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/crotalus/32/41_2.png) [@Crotalus](https://boards.straightdope.com/u/Crotalus)\
**Post date:** [January 9, 2014, 1:24pm UTC](https://boards.straightdope.com/t/recommend-a-password-manager-please/678244/29 "2014-01-09T13:24:22Z")

</div>

Does anyone have an opinion on Apple Keychain as a password manager?

---

<div class="post-metadata">

**Author:** ![RickG](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/rickg/32/5174_2.png) [@RickG](https://boards.straightdope.com/u/RickG)\
**Post date:** [January 9, 2014, 2:00pm UTC](https://boards.straightdope.com/t/recommend-a-password-manager-please/678244/30 "2014-01-09T14:00:34Z")

</div>

I use [1Password](https://agilebits.com/onepassword/win). Rather than a subscription model, it is just a regular, old-fashioned, paid app ($35; 30-day free trial). Plugins for all the major browsers. Support for multiple databases. You can save your database(s) to Dropbox for easy access/syncing from multiple devices. It also has features for saving product license keys and secure notes. I like it.

---

<div class="post-metadata">

**Author:** ![UncleRojelio](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/unclerojelio/32/3160_2.png) [@UncleRojelio](https://boards.straightdope.com/u/UncleRojelio)\
**Post date:** [January 9, 2014, 3:32pm UTC](https://boards.straightdope.com/t/recommend-a-password-manager-please/678244/31 "2014-01-09T15:32:30Z")

</div>

> [@RickG](#):
>
> I use [1Password](https://agilebits.com/onepassword/win). Rather than a subscription model, it is just a regular, old-fashioned, paid app ($35; 30-day free trial). Plugins for all the major browsers. Support for multiple databases. You can save your database(s) to Dropbox for easy access/syncing from multiple devices. It also has features for saving product license keys and secure notes. I like it.

I’ll second 1Password. It may cost a little but it is worth it. If you are an Apple fan, it works seamlessly with iCloud to keep all your passwords synced across all your devices. Worth every penny.

---

<div class="post-metadata">

**Author:** ![RickG](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/rickg/32/5174_2.png) [@RickG](https://boards.straightdope.com/u/RickG)\
**Post date:** [January 9, 2014, 3:43pm UTC](https://boards.straightdope.com/t/recommend-a-password-manager-please/678244/32 "2014-01-09T15:43:23Z")

</div>

> [@UncleRojelio](#):
>
> I’ll second 1Password. It may cost a little but it is worth it. If you are an Apple fan, it works seamlessly with iCloud to keep all your passwords synced across all your devices. Worth every penny.

I do use it on OSX/iOS, but have had the data in Dropbox since before it worked with iCloud. Keep thinking about migrating, but haven’t had the time.

But they also have Windows and Android versions of everything now, which presumably only work with Dropbox syncing.

---

<div class="post-metadata">

**Author:** ![Leaper](https://avatars.discourse-cdn.com/v4/letter/l/4bbf92/32.png) [@Leaper](https://boards.straightdope.com/u/Leaper)\
**Post date:** [January 10, 2014, 3:35am UTC](https://boards.straightdope.com/t/recommend-a-password-manager-please/678244/33 "2014-01-10T03:35:36Z")

</div>

To follow up my previous post: is there any reason for me to use a software/plugin and NOT the built-in Firefox password manager if I only have one or two important passwords that AREN’T used on the Web?

---

<div class="post-metadata">

**Author:** ![LouisB](https://avatars.discourse-cdn.com/v4/letter/l/dfb087/32.png) [@LouisB](https://boards.straightdope.com/u/LouisB)\
**Post date:** [January 10, 2014, 7:27am UTC](https://boards.straightdope.com/t/recommend-a-password-manager-please/678244/34 "2014-01-10T07:27:24Z")

</div>

Any opinions of Password Box??

---

<div class="post-metadata">

**Author:** ![FrY10cK](https://avatars.discourse-cdn.com/v4/letter/f/a9adbd/32.png) [@FrY10cK](https://boards.straightdope.com/u/FrY10cK)\
**Post date:** [January 10, 2014, 12:42pm UTC](https://boards.straightdope.com/t/recommend-a-password-manager-please/678244/35 "2014-01-10T12:42:35Z")

</div>

> [@AaronX](#):
>
> I mainly use my phone, so I wanted one with phone and desktop versions. It had to be able to export password databases, so I can do my own backup. I use KeePass for these reasons.

I discovered KeePass at [http://portableapps.com/](http://portableapps.com/) years ago. They have tons of great open source apps to put on your thumb drive or phone.

---

<div class="post-metadata">

**Author:** ![Krouget](https://avatars.discourse-cdn.com/v4/letter/k/b38774/32.png) [@Krouget](https://boards.straightdope.com/u/Krouget)\
**Post date:** [January 10, 2014, 3:52pm UTC](https://boards.straightdope.com/t/recommend-a-password-manager-please/678244/36 "2014-01-10T15:52:51Z")

</div>

> [@drewtwo99](#):
>
> I use lastpass, and they have plugins for both IE and Chrome, and can import your saved passwords/usernames from both automatically to your vault. So no problems there. Changing them all to secure, independent passwords does take some time, but LastPass plugin (which is free) can do it for you and then remember the new password automatically in both Chrome or IE.

I fully agree with **drewtwo99**. I’ve been using LastPass for some time now, synced across Chrome browsers, mobile phones and tablets, and it’s been great.

I’d also recommend **2-step verification** for most of your sensitive accounts, if not all of them that have it available. This way, even if your password is compromised, they’d still need the verification number in order to gain access, which is totally controlled on your end. Take a look at Google Authenticator.

https://www.youtube.com/embed/17rykTIX_HY?feature=oembed&wmode=opaque

---

<div class="post-metadata">

**Author:** ![FrY10cK](https://avatars.discourse-cdn.com/v4/letter/f/a9adbd/32.png) [@FrY10cK](https://boards.straightdope.com/u/FrY10cK)\
**Post date:** [January 10, 2014, 5:34pm UTC](https://boards.straightdope.com/t/recommend-a-password-manager-please/678244/37 "2014-01-10T17:34:26Z")

</div>

Does LastPass still store your passwords on their servers? They got hacked in 2011. I don’t know if the encryption was ever broken or any damage done.

---

<div class="post-metadata">

**Author:** ![Krouget](https://avatars.discourse-cdn.com/v4/letter/k/b38774/32.png) [@Krouget](https://boards.straightdope.com/u/Krouget)\
**Post date:** [January 10, 2014, 5:46pm UTC](https://boards.straightdope.com/t/recommend-a-password-manager-please/678244/38 "2014-01-10T17:46:54Z")

</div>

> [@FrY10cK](#):
>
> Does LastPass still store your passwords on their servers? They got hacked in 2011. I don’t know if the encryption was ever broken or any damage done.

Your encrypted data is on their end. With a good master password and 2-step verification, it would be difficult to get to, especially since the latter is generated locally.

[Source 1](https://helpdesk.lastpass.com/getting-started/introduction/why-is-lastpass-safe/) [Source 2](https://helpdesk.lastpass.com/security-options/)

---

<div class="post-metadata">

**Author:** ![Deeg](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/deeg/32/2955_2.png) [@Deeg](https://boards.straightdope.com/u/Deeg)\
**Post date:** [January 10, 2014, 11:17pm UTC](https://boards.straightdope.com/t/recommend-a-password-manager-please/678244/39 "2014-01-10T23:17:26Z")

</div>

> [@Leaper](#):
>
> To follow up my previous post: is there any reason for me to use a software/plugin and NOT the built-in Firefox password manager if I only have one or two important passwords that AREN’T used on the Web?

I would recommend using KeePass and not the browser. There’s always a chance that a bug will pop up in one of your browsers that will give a script access to your list of passwords. This is possible in KeePass, too, but since it’s a less complex application and doesn’t change as much is less likely. (If you are really paranoid you can set up KeePass to require your approval for every PW request your browser makes. This makes it even less likely that a bug releases your PWs.)

---

<div class="post-metadata">

**Author:** ![Qwisp](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/qwisp/32/397_2.png) [@Qwisp](https://boards.straightdope.com/u/Qwisp)\
**Post date:** [January 11, 2014, 12:55am UTC](https://boards.straightdope.com/t/recommend-a-password-manager-please/678244/40 "2014-01-11T00:55:20Z")

</div>

> [@levdrakon](#):
>
> After being away for a 10 or 15 minutes I clicked on the dope only to have to log in again. First attempt wrong autofill again and back to 1 of 5 attempts. Second time I had to carefully select my log in from a drop down, then carefully select my password from a drop down, then hope it works.
> 
> Sheesh, Chrome never makes me do that. Pain so far.

Go the the Lastpass site,look for the straight dope site. Click the pencil, this lets you edit the information. Make sure the box with your username and the password is correct. If not correct the information and save it. You also need to make sure the site is only saved once with the correct info. If it listed twice delete the incorrect duplicate.

[Previous page](https://boards.straightdope.com/t/recommend-a-password-manager-please/678244.md?page=1)
