How to create, manage and store passwords securely

https://blog.emsisoft.com/2018/01/23/how-to-create-manage-store-passwords/

 

At this point anyone who asks me which password manager to use, I tell them Bruce Schneier's, Password Safe.

 

Anyway to use it with Android and iOS?

 

Yes there is both Android and iOS versions, its open source, free and designed by the man himself, using two fish to encrypt. It has its own input keyboard with special keys to send the login data to the login dialogue so it doesnt need to use the copy/paste clipboard.

 

I may give this a spin. Currently using 1Password but eh.

How do you use this with Chrome for desktop? Do you have to copy/paste everything?

 

There is a virtual keyboard with autotype keys in the desktop versions too.

 

That is pretty cool. Thanks!

 

Password Safe - for Windows, also natively supports Yubikey HMAC as a second factor on the database - essential as far as I'm concerned. Sadly, the Linux version does not do so.

 

Android does, as long as the Android device and the key support NFC.

 

Another really useful feature of suitable Yubikey support for NFC (e.g. the Yubikey Neo) is that it will also allow the Android version of the Yubikey Authenticator to generate TOTP (via the NFC), using CCID-based secrets in the Yubikey for different sites (and these do not take any regular slots on the device). That means that you can have real two factor that isn't dependent on the address space of the mobile phone. Since many more sites have TOTP rather than U2F, that's a pretty handy facility.

Now "all" that has to happen is for login authentication and U2F to be supported via NFC in android and the things might be worth using - I won't be holding my breath though.