Storing passwords

Abhi

I don't want to steal your secret, yet I am curious that what methods do you employ to keep your passwords safe. I can remember those related to my bank and couple of others. But all those forums, social media, blogs and numerous other passwords. How do you store them ? Using an Excel sheet ?

phenomlab

Abhi How do you store them ? Using an Excel sheet ?

Shudder.... Nooooooo 😠

Use a password manager - Bitwarden is an an excellent choice, and is free. The passwords are stored in a one-way hash using bCrypt which is (currently) unbreakable.

0way

KeePass 👍️

Abhi

Read somewhere that KeePass was hacked / not safe. I don't know for sure.

But I have heard a lot about KeePass. A lot of people use it. I will try Bitwarden.

Jason

I never store anything related to banks or online money transaction site, Mail. Rest sites like Forum, blogs and other sites i visit i store in Firefox password saver.

admin

Jason i store in Firefox password saver.

Run Avast. It will extract all passwords in less than a second from Firefox. If Avast can, anybody will be able to do it.

Not safe.

phenomlab

admin Also, some variants of Chrome store passwords in clear text in a file that is easily discovered.

Jason

admin Glad i am not running Avast, i am using Linux and i don't make use of any unsafe softwares.

Abhi

How about a password protected Excel sheet ? 🤔

phenomlab

Abhi How about a password protected Excel sheet ?

Nope. Excel's password protection can be bypassed using VBA
https://www.online-tech-tips.com/ms-office-tips/how-to-remove-crack-or-break-a-forgotten-excel-xls-password/

Abhi

phenomlab variants of Chrome store passwords in clear text

Chromium ? Have you tried the new Microsoft browser ? How is the password storage in it ?

phenomlab Excel's password protection can be bypassed using VBA

How about encrypting it through VeraCrypt or similar ?

phenomlab

Abhi Have you tried the new Microsoft browser ? How is the password storage in it ?

You mean Edge ? I wouldn't trust Microsoft with a padlock for my garden shed.

phenomlab

Abhi How about encrypting it through VeraCrypt or similar ?

That's a possibility, yes, but it should be on a volume that needs to be mounted first ideally with it's own password.

admin

phenomlab You mean Edge ?

The new version of Edge is based on Chromium.

admin

How about password protection in Libre Office ? The same as MS Office ?

phenomlab

admin they are also vulnerable, yes.

admin

Glad we talked about it. Avast would already have got loads of password from Firefox.

So, no browser has a strong in-built password storage ?

phenomlab

admin no. I always recommend taking this route. My personal preference and advice to others is always to year a password manager that has an browser integration for password insertion into forms. Such security around the storage of passwords would always be bCrypt.

Abhi

The point is, it is not safe to store passwords in Firefox. If Avast can take it, anyone can.

Abhi

phenomlab Such security around the storage of passwords would always be bCrypt.

MyBB uses it. I read somewhere about it on how they store passwords.

admin

phenomlab password manager that has an browser integration for password insertion into forms.

👍️

What is your opinion about KeePass ?