# Password managers **URL:** \ **Category:** useful info\ **Created:** [April 27, 2016, 12:04pm UTC](https://cog.discourse.group/t/password-managers/1151 "2016-04-27T12:04:07Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![Woodman](https://sea1.discourse-cdn.com/flex001/user_avatar/cog.discourse.group/woodman/32/24_2.png) [@Woodman](https://cog.discourse.group/u/Woodman)\ **Post date:** [April 25, 2016, 2:45pm UTC](https://cog.discourse.group/t/password-managers/1151/1 "2016-04-25T14:45:21Z")
Anyone ever get one of these? > At Amazon we take your security and privacy very seriously. As part of our routine monitoring, we discovered a list of email addresses and passwords posted online. While the list was not Amazon-related, we know that many customers reuse their passwords on multiple websites. Since we believe your email addresses and passwords were on the list, we have assigned a temporary password to your [Amazon.com](http://Amazon.com) account out of an abundance of caution. I’m assuming that it’s false, even though it does give what looks like a link to [amazon.com](http://amazon.com) on the email. I logged in to Amazon this morning just fine to do a little bike lock shopping, which is impossible and I’m open to suggestions there. Correction, they did lock me out. Crap, time to look into a password manager. I’m already using XKCD’s password suggestions. ---
**Author:** ![MikeP](https://avatars.discourse-cdn.com/v4/letter/m/a4c791/32.png) [@MikeP](https://cog.discourse.group/u/MikeP)\ **Post date:** [April 25, 2016, 8:19pm UTC](https://cog.discourse.group/t/password-managers/1151/2 "2016-04-25T20:19:25Z")
I use [KeePass](http://keepass.info/download.html) It can generate the passwords for you, and it can also auto type user names/passwords as well. ---
**Author:** ![CryHavok](https://sea1.discourse-cdn.com/flex001/user_avatar/cog.discourse.group/cryhavok/32/413_2.png) [@CryHavok](https://cog.discourse.group/u/CryHavok)\ **Post date:** [April 25, 2016, 8:20pm UTC](https://cog.discourse.group/t/password-managers/1151/3 "2016-04-25T20:20:10Z")
> [@The "Oops" category](https://cog.discourse.group/t/the-oops-category/1079/33): > > time to look into a password manager I’m sure this’ll start a minor religious war, but IMO LastPass is one of the better choices. It supports a good range of 2FA options too, though you can’t use GeoIP to restrict access any more. ---
**Author:** ![Rizak](https://sea1.discourse-cdn.com/flex001/user_avatar/cog.discourse.group/rizak/32/4190_2.png) [@Rizak](https://cog.discourse.group/u/Rizak)\ **Post date:** [April 25, 2016, 8:36pm UTC](https://cog.discourse.group/t/password-managers/1151/4 "2016-04-25T20:36:01Z")
Since I can’t insert anything into my computer anymore, phrasing, using a USB key to keep all of my passwords just doesn’t work for me. What else ya got? ---
**Author:** ![MikeP](https://avatars.discourse-cdn.com/v4/letter/m/a4c791/32.png) [@MikeP](https://cog.discourse.group/u/MikeP)\ **Post date:** [April 25, 2016, 10:54pm UTC](https://cog.discourse.group/t/password-managers/1151/5 "2016-04-25T22:54:06Z")
> [@The "Oops" category](https://cog.discourse.group/t/the-oops-category/1079/35): > > I’m sure this’ll start a minor religious war, but IMO LastPass is one of the better choices You don’t tend to get much in the way of religious warfare here - one of the things I like about the community here. LastPass looks like a pretty good option too, but I’ve got around 160 passwords stored in KeePass so I probably won’t be switching unless the other option is significantly better - and I think they are probably fairly evenly matched. I have one question though. I don’t have _many_ passwords that are not web based, but there are some that need to be entered into programs rather than web pages (Steam being the prime example, but there are others as well). KeePass handles this by letting you copy information to the clipboard - which it automatically clears after 10 seconds or so. From what I read, it looks like LastPass is purely web based - which I suspect may be in incorrect impression. Can you confirm that it works outside the browser as well? ---
**Author:** ![Force10](https://sea1.discourse-cdn.com/flex001/user_avatar/cog.discourse.group/force10/32/1550_2.png) [@Force10](https://cog.discourse.group/u/Force10)\ **Post date:** [April 25, 2016, 11:16pm UTC](https://cog.discourse.group/t/password-managers/1151/6 "2016-04-25T23:16:13Z")
> [@The "Oops" category](https://cog.discourse.group/t/the-oops-category/1079/37): > > You don’t tend to get much in the way of religious warfare here However occasionally we’ll get some Android vs iOS or Windows vs Mac vs Linux. 🙂 ---
**Author:** ![Ook](https://sea1.discourse-cdn.com/flex001/user_avatar/cog.discourse.group/ook/32/72_2.png) [@Ook](https://cog.discourse.group/u/Ook)\ **Post date:** [April 26, 2016, 6:44am UTC](https://cog.discourse.group/t/password-managers/1151/7 "2016-04-26T06:44:00Z")
Windows SUUUUUUUUUUUUUUUUUUUCKS 😝 😝 😝 bwahaha, flashback to the OS/2 vs Windows war… was good times! ---
**Author:** ![DocDubious](https://sea1.discourse-cdn.com/flex001/user_avatar/cog.discourse.group/docdubious/32/995_2.png) [@DocDubious](https://cog.discourse.group/u/DocDubious)\ **Post date:** [April 26, 2016, 3:23pm UTC](https://cog.discourse.group/t/password-managers/1151/8 "2016-04-26T15:23:47Z")
> [@The "Oops" category](https://cog.discourse.group/t/the-oops-category/1079/34): > > I use KeePass > > It can generate the passwords for you, and it can also auto type user names/passwords as well. KeePass here, too… and recently started using the FFox plugin. I store the KPX database in Dropbox, so I can open the same password file from any computer… or, as I recently did on a driving trip to Boston, on a smart phone to find the password to my account on the EZPass site. ---
**Author:** ![DocDubious](https://sea1.discourse-cdn.com/flex001/user_avatar/cog.discourse.group/docdubious/32/995_2.png) [@DocDubious](https://cog.discourse.group/u/DocDubious)\ **Post date:** [April 26, 2016, 3:25pm UTC](https://cog.discourse.group/t/password-managers/1151/9 "2016-04-26T15:25:11Z")
> [@The "Oops" category](https://cog.discourse.group/t/the-oops-category/1079/37): > > Can you confirm that it works outside the browser as well? I’d like to know, too… I’d need to store RDP passwords, among other things. ---
**Author:** ![Woodman](https://sea1.discourse-cdn.com/flex001/user_avatar/cog.discourse.group/woodman/32/24_2.png) [@Woodman](https://cog.discourse.group/u/Woodman)\ **Post date:** [April 26, 2016, 4:18pm UTC](https://cog.discourse.group/t/password-managers/1151/10 "2016-04-26T16:18:21Z")
OK, so I create a keepass or lastpass database as step one. Then I enter accounts and save the data however. Now, how do I get access to an account from my phone/home PC/kindle/whatever? It looks like that functionality is a pay option for Lastpass, and for KeePass I could just have multiple copies of the database? Or have it on a Google drive? Somehow password managers are a blind spot for me. I can’t wrap my head around how it works when I’m on several different devices all the time. This is old, but accurate? > **[\[Tutorial\] Sync Passwords Across Computers And Android With KeePass](http://www.androidpolice.com/2011/03/30/tutorial-sync-passwords-across-computers-and-android-with-keepass/)** > > Have you ever been in a situation where you needed to remotely access an account but couldn’t remember its password? I know that I have done so all too man... by Cameron Summerson in Applications, Tips & Tutorials ---
**Author:** ![CaffeinatedNoms](https://sea1.discourse-cdn.com/flex001/user_avatar/cog.discourse.group/caffeinatednoms/32/3779_2.png) [@CaffeinatedNoms](https://cog.discourse.group/u/CaffeinatedNoms)\ **Post date:** [April 26, 2016, 5:26pm UTC](https://cog.discourse.group/t/password-managers/1151/11 "2016-04-26T17:26:18Z")
I seriously don’t get how the Windows and Android worlds keep on going without a systemwide password manager. Granted the Apple Keychain isn’t without its issues and the odd security attack, but it’s been a core part of MacOS since the launch of OS X, an optional feature since MacOS 8.6; and a core part of iOS since the first inception because everything has to “just work” (and yes I am fully aware that that is a lie and it has outages just the same as every other synchronisation tool). This isn’t me being smug or superior, just legitimately confused by the apparent lack of interest by the two largest consumer operating systems in the world… ---
**Author:** ![Woodman](https://sea1.discourse-cdn.com/flex001/user_avatar/cog.discourse.group/woodman/32/24_2.png) [@Woodman](https://cog.discourse.group/u/Woodman)\ **Post date:** [April 26, 2016, 5:30pm UTC](https://cog.discourse.group/t/password-managers/1151/12 "2016-04-26T17:30:49Z")
I think the only person working Windows security is huddled in a ball in their padded office in the basement staring at their PC running Microsoft Bob and whimpering. Seriously, I wouldn’t trust a security product from MS with a ten foot cattle prod. ---
**Author:** ![CaffeinatedNoms](https://sea1.discourse-cdn.com/flex001/user_avatar/cog.discourse.group/caffeinatednoms/32/3779_2.png) [@CaffeinatedNoms](https://cog.discourse.group/u/CaffeinatedNoms)\ **Post date:** [April 26, 2016, 5:38pm UTC](https://cog.discourse.group/t/password-managers/1151/13 "2016-04-26T17:38:35Z")
Ugh, MSFT Bob, the genesis of Comic Sans. The security engineer deserves _every second_ of their punishment. ---
**Author:** ![CryHavok](https://sea1.discourse-cdn.com/flex001/user_avatar/cog.discourse.group/cryhavok/32/413_2.png) [@CryHavok](https://cog.discourse.group/u/CryHavok)\ **Post date:** [April 26, 2016, 7:33pm UTC](https://cog.discourse.group/t/password-managers/1151/14 "2016-04-26T19:33:40Z")
> [@The "Oops" category](https://cog.discourse.group/t/the-oops-category/1079/37): > > From what I read, it looks like LastPass is purely web based - which I suspect may be in incorrect impression. Can you confirm that it works outside the browser as well? In the sense that you can copy and paste, yes, though there’s no auto-clear. There’s no command line client though (LastPass Pocket seems to be the closest). > [@The "Oops" category](https://cog.discourse.group/t/the-oops-category/1079/42): > > Now, how do I get access to an account from my phone/home PC/kindle/whatever? As you suspected, you pay for “extra” device types. I use it exactly that way, across various browsers (on different OSs) and my Android devices. ---
**Author:** ![DocDubious](https://sea1.discourse-cdn.com/flex001/user_avatar/cog.discourse.group/docdubious/32/995_2.png) [@DocDubious](https://cog.discourse.group/u/DocDubious)\ **Post date:** [April 26, 2016, 7:57pm UTC](https://cog.discourse.group/t/password-managers/1151/15 "2016-04-26T19:57:39Z")
> [@The "Oops" category](https://cog.discourse.group/t/the-oops-category/1079/42): > > Now, how do I get access to an account from my phone/home PC/kindle/whatever? I slipped this in my post above ^^^, but what I do is store the KeePass database on DropBox, and have the appropriate KeePass client on each device - Windows, Android, iPad. ---
**Author:** ![Woodman](https://sea1.discourse-cdn.com/flex001/user_avatar/cog.discourse.group/woodman/32/24_2.png) [@Woodman](https://cog.discourse.group/u/Woodman)\ **Post date:** [April 26, 2016, 8:04pm UTC](https://cog.discourse.group/t/password-managers/1151/16 "2016-04-26T20:04:47Z")
Where do you keep your key file then? Do I have to use the keepass password every time I want to log into something? Typing BrontoslikeSushi everytime I want to look at facebook sounds like a royal pain in the ass. ---
**Author:** ![balance](https://sea1.discourse-cdn.com/flex001/user_avatar/cog.discourse.group/balance/32/1888_2.png) [@balance](https://cog.discourse.group/u/balance)\ **Post date:** [April 26, 2016, 8:13pm UTC](https://cog.discourse.group/t/password-managers/1151/17 "2016-04-26T20:13:43Z")
I think Microsoft has teams dedicated to security. I feel they’re constantly shot down by a group that prioritizes not breaking a badly written third party app that dates to 1987, unfortunately. ---
**Author:** ![MikeP](https://avatars.discourse-cdn.com/v4/letter/m/a4c791/32.png) [@MikeP](https://cog.discourse.group/u/MikeP)\ **Post date:** [April 26, 2016, 8:45pm UTC](https://cog.discourse.group/t/password-managers/1151/18 "2016-04-26T20:45:24Z")
On my desktop machines I keep KeePass open all the time. For security I rely on the fact that I lock my machine when I walk away from it (and I _do_ make sure that happens). I don’t know how that would work on a phone as I haven’t needed it. My GMail is always logged on and I only ever log in to other sites on my desktop. ---
**Author:** ![DocDubious](https://sea1.discourse-cdn.com/flex001/user_avatar/cog.discourse.group/docdubious/32/995_2.png) [@DocDubious](https://cog.discourse.group/u/DocDubious)\ **Post date:** [April 27, 2016, 12:04pm UTC](https://cog.discourse.group/t/password-managers/1151/19 "2016-04-27T12:04:07Z")
> [@The "Oops" category](https://cog.discourse.group/t/the-oops-category/1079/48): > > Where do you keep your key file then? > > Do I have to use the keepass password every time I want to log into something? Typing BrontoslikeSushi everytime I want to look at facebook sounds like a royal pain in the ass. Open KeePass once, and leave it open… lock your machine when you walk away ( as @MikeP said). Then switch over to KeePass and Ctrl + C on an entry to grab a password, Ctrl + B for the ID, and paste into your required field. There are plugins for FFox… probably Chrome, too, but the link to the plugins page is inside the KeePass app, or on their website. To use the plugin, leave KeePass open, and visit the page. The plugin will look for the matching URL, then offer you IDs to use… in case there are more than one. ---
**Author:** ![dakboy](https://sea1.discourse-cdn.com/flex001/user_avatar/cog.discourse.group/dakboy/32/68_2.png) [@dakboy](https://cog.discourse.group/u/dakboy)\ **Post date:** [April 27, 2016, 2:39pm UTC](https://cog.discourse.group/t/password-managers/1151/20 "2016-04-27T14:39:31Z")
> [@Ook](#): > > flashback to the OS/2 vs Windows war… was good times! I really wish OS/2 had been able to make headway. It was burdened by two major problems: - IBM couldn’t market it worth a damn - Its support for Windows apps was too good, when it needed to be just good enough to give people a taste of OS/2, then send them off looking for native OS/2 versions of apps. [Next page](https://cog.discourse.group/t/password-managers/1151.md?page=2)