Password storage apps

[DonaldsRump]

I need some recommendations for a password storage app. Which one do you recommend and why? Obviously, I'm concerned about security, but ease of use and being accessible on different devices would also be great.

We have PCs, Chromebooks, and Macs, as well as Android phones/iPhones in our family. Ideally, I'd like to get a single app for each person in our family where we can store passwords.

I've never used one before. However, there seem to be more and more attempts to hack/phish, so I want to use extremely strong passwords, which, unfortunately, are extremely hard to remember!

Thank you for your suggestions.

[dickthegrouch]

1. I use LastPass and passwordWallet

Last edited Thu Dec 3, 2020, 12:07 PM - Edit history (1)

LastPass is slightly better integrated with the mobiles but it’s cloud implemented.

PasswordWallet is locally stored so you need to sync with each device to keep them all current.

Edited to add:
Of course you are even better protected if you enable multi-factor authentication such as from Duo, Google Authenticator, Authify, or others.
SMS is not secure enough these days.

CISM CISA QSA
(Security expert)

[DonaldsRump]

2. Thanks for that. Here's are recent articles reviewing a variety of apps

Last edited Thu Dec 3, 2020, 12:19 PM - Edit history (1)

https://www.cnet.com/how-to/best-password-manager-of-2020-1password-last-password-and-more/

https://www.pcmag.com/categories/password-managers

[klook]

3. 1Password has been a part of my daily life for years.

I’m using it to store hundreds of unique passwords, credit card and bank information, secure notes, software licenses, email account details, Internet router data, ISP account information, tax details, URLs, and much more.

It would alert me if a password I use appeared in a database of known hacked passwords. It lets me know if any of my passwords are old or not unique. It generates passwords for me to my specifications (and lets me override the recommendation if I want to). And it has browser extensions to let me use a shortcut to enter passwords, credit card info, and personal details on websites easily. (It also alerts me if a website isn’t using https for security.)

The cost is reasonable, and there’s a 30-day free trial option so you can try before you buy. And there are multi-user options for families. More info here: https://1password.com/
Security information here: https://1password.com/security/

FYI - I don’t work for them, but I’m a very enthusiastic and satisfied customer.

[DonaldsRump]

7. Thanks!

This is very detailed firsthand info. Much appreciated.

(I love your avatar, by the way! Ms. Abrams is a real hero, and she should be the GA governor right now. I trust she will be be 2022!)

[packman]

4. You do know that Win10 has this feature (I think Win 8 does also)

I've used it several times----

From the internet search:

Find stored Usernames & Passwords in Windows 10. To directly access the Stored User Names and Passwords Control Panel applet, via WinX Menu, open Command Prompt (Admin), type the following "rundll32" command, and hit Enter: The Stored User Names and Passwords box will open. Here you will be able to see the saved passwords and user names.

[DonaldsRump]

6. No, I actually know nothing about this

I am aware that usernames and passwords can be stored in browsers, but something about that seems insecure.

I truly don't know anything about password managers, which is why I asked the question in the first place!

[TwilightZone]

5. KeePass

Free, open source, strong-password generation, very easy to use, lots of plug-ins/add-ons, etc.

https://keepass.info/

I just started using it a few months ago, replacing an older app I'd used for years that was no longer being updated. It seems to do everything well.

[Susan Calvin]

13. Thank you.

I prefer open source whenever possible.

[ManiacJoe]

14. KeePass is my choice for

coordinating by Win10 PC and my Android phone.

[OAITW r.2.0]

8. I use an excel spreadsheet.

In the cloud, so I can access on any device.

[dickthegrouch]

9. I hope it's encrypted

Cloud storage is notoriously difficult to secure. Even fortune 1000 companies regularly find unsecured cloud storage repositories. Multiple breaches occur for exactly that reason.

[OAITW r.2.0]

10. It's password protected.

[dickthegrouch]

11. Not necessarily the same thing

Password may be needed to access in Excel, but the underlying file could be readable by another means such as a binary editor. Please satisfy yourself that reading with something basic like notepad++ doesn’t reveal all your secrets.

[OAITW r.2.0]

12. OK, thanks.