need help finding best password manager preferably one can use with a usb key

Discussion in 'privacy technology' started by majorpain, Dec 7, 2016.

  1. majorpain

    majorpain Registered Member

    Joined:
    Jul 22, 2016
    Posts:
    40
    Location:
    tennessee
    I need a password manager for my windows 10 pc. id like a password manager that could possably do forms as well but passwords alone are ok to. also would like to be able to instead of using master passwords and such be able to plug in a usb and use that as the key like a car key
     
  2. Cohen

    Cohen Registered Member

    Joined:
    Jul 29, 2016
    Posts:
    15
    Location:
    /
    I believe KeePass can do what you're asking for, at least somewhat along those lines.
     
  3. majorpain

    majorpain Registered Member

    Joined:
    Jul 22, 2016
    Posts:
    40
    Location:
    tennessee
    what about last pass or crap I forgot the other good one
     
  4. kls490

    kls490 Registered Member

    Joined:
    Aug 15, 2015
    Posts:
    60
    Location:
    Mid Atlantic Region (USA)
  5. TomeiNingen

    TomeiNingen Registered Member

    Joined:
    Nov 8, 2016
    Posts:
    50
    Location:
    Fort Meade, Maryland
    I know you're looking for an automated solution, but I'm going to strongly suggest using pen and paper to keep track of your passwords instead of a password manager. it's only a matter of time before someone compromises them (again). If you're concerned about someone you live with finding the passwords then you can always use a simple substitution to protect the actual passwords.

    That said, on the "car key" front you can look into these guys https://www.yubico.com/products/yubikey-hardware/yubikey4/
     
    Last edited: Dec 10, 2016
  6. haakon

    haakon Guest

    I've been using FlyingBit Password Keeper Portable for years. It's no longer under development; it doesn't need to be. I use it on one of my Windows 10 systems. No webbuhnetz needed.

    This would also be of interest to anyone dropping in here resulting from a search on password manager and USB.

    Pretty nice review and screen shots here:
    http://www.softpedia.com/get/PORTABLE-SOFTWARE/Security/Password-Managers---Generators/FlyingBit-Password-Keeper-Portable.shtml

    Though it works fine off a USB stick, I used to keep it in folders on my HDDs. If I made a change on one, I just copied the data file to the others.

    Now I run it off a NAS. Also works from a Windows share point.

    I use its Twofish cipher for the data file. All I need to remember is one 24 character passphrase which after a while became muscle memory.

    I zip the folder with Serpent and a 14 character password keep it two cloud accounts. In a catastrophic event like my house getting washed away I can download it to a new computer, or use it temporarily on some one else's. No nasty leftovers on close and folder delete.

    I export the data to an HTML file, convert to a txt and store a printout in a safe deposit box. When I travel some of that txt comes with me in an encrypted zip file on a USB stick.

    The only annoyance I've run into is to do a LF in the Notes pane, you need to do Ctrl-Enter.

    I put it to work in storing more than logins and passwords. All fields can be copied and pasted into any browser or window.

    This program is loaded.

    FBPW.jpg
     
    Last edited by a moderator: Dec 10, 2016
  7. deBoetie

    deBoetie Registered Member

    Joined:
    Aug 7, 2013
    Posts:
    1,832
    Location:
    UK
    Since remote threats are the ones which are prominent for me anyway (and I'm realistic that if someone is physically looking for my password records they can as easily get my cooperation with a wrench) - then physical records are actually a very good idea.

    I'd also suggest that a restricted number of long strong passwords can "easily" be memorised, and these can unlock a variety of record stores which may or may not be online. For instance, I run some airgapped password and certificate management systems which are never connected and are only used for that purpose, based on usb Linux distros.

    I also use password managers backed by 2FA with Yubikey. These are restricted in the scope of what damage they can do if compromised and what they are used for (e.g. not for banking), and indeed, do not necessarily store all that's needed to log in. For example, you can always add a Pin to what's stored in the password manager, and only use it for less sensitive matters.

    I think it's the usual mantra - defence in depth, and don't assume anything is uncompromised. Raise the bar, and hope your adversary is after easier pickings.

    PS - for the OP, I use LastPass and Password Safe (for different purposes), both protected with the USB Yubikey (which also protects my local account login). KeePass also runs Yubikey with a plugin.
     
  8. Password managers are mandatory where I work. We use a mix of KeePass and LastPass. Only clients we don't use online password managers.
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.