LastPass Premium Offer

[hotshot05]

I make passwords by drawing on keyboard. Don't need no password manager. Brain remembers all the passes including 16 digit CC and DC numbers. 16 digit numbers are easy to remember if you memorise them in groups of 4.

Wow. You seem to have partially photographic memory.

 

[Doremon]

remembering password is not a big project but yes keeping trust on virtual digital world may be turn in big deal sometime.
there are few good method to make strong but easy to remember password. Let's combo vehicle no, vehicle type, vehicle brand, society name, favorite vacation place name, old school name etc etc

 

[eXperience]

That's why I use Keepass. It doesn't store anything online. Now all I need is to remember one password for my keepass database and I'm good to go. It also has an Android version and a plug-in for Firefox for auto-logins.

Even Lastpass doesn't. Decryption takes places offline.

 

[booo]

Even Lastpass doesn't. Decryption takes places offline.

your statement doesnt make any sense. are you saying that last pass will upload the encrypted passwords?

any encrypted data with reversible encryption like DES or AES is not safe for storing passwords.

 

[smnrock]

your statement doesnt make any sense. are you saying that last pass will upload the encrypted passwords?

any encrypted data with reversible encryption like DES or AES is not safe for storing passwords.

Does your statement? I know people talks here about theory... if you think you can break encryption based on 256 bit key, then i dont think anyone should transfer any data across https either.

 

[booo]

Does your statement? I know people talks here about theory... if you think you can break encryption based on 256 bit key, then i dont think anyone should transfer any data across https either.

the https encryption is short lived. TLS handshake generates a 256bit key on the fly after identifying itself. it is almost impossible to break it during the session.
on the other hand if you store the encrypted password, a person who gets access to it can run dictionary attack on the encrypted data for few days and get the password. there are tools available for this online. its not "just a theory". ever heard of john the ripper?

 

[smnrock]

^^what are you talking? just few days for breaking 256 bit key based encryption? Please read the theory at least, before making such comments.

 

[techno_funky]

Thanks a lot for this