LastPass Premium Offer

6pack said:
I make passwords by drawing on keyboard. Don't need no password manager. Brain remembers all the passes including 16 digit CC and DC numbers. 16 digit numbers are easy to remember if you memorise them in groups of 4.
Click to expand...
Wow. You seem to have partially photographic memory.
 
remembering password is not a big project but yes keeping trust on virtual digital world may be turn in big deal sometime.
there are few good method to make strong but easy to remember password. Let's combo vehicle no, vehicle type, vehicle brand, society name, favorite vacation place name, old school name etc etc
 
rdst_1 said:
That's why I use Keepass. It doesn't store anything online. Now all I need is to remember one password for my keepass database and I'm good to go. It also has an Android version and a plug-in for Firefox for auto-logins.
Click to expand...

Even Lastpass doesn't. Decryption takes places offline.
 
eXperience said:
Even Lastpass doesn't. Decryption takes places offline.
Click to expand...
your statement doesnt make any sense. are you saying that last pass will upload the encrypted passwords?

any encrypted data with reversible encryption like DES or AES is not safe for storing passwords.
 
booo said:
your statement doesnt make any sense. are you saying that last pass will upload the encrypted passwords?

any encrypted data with reversible encryption like DES or AES is not safe for storing passwords.
Click to expand...
Does your statement? I know people talks here about theory... if you think you can break encryption based on 256 bit key, then i dont think anyone should transfer any data across https either.
 
smnrock said:
Does your statement? I know people talks here about theory... if you think you can break encryption based on 256 bit key, then i dont think anyone should transfer any data across https either.
Click to expand...
the https encryption is short lived. TLS handshake generates a 256bit key on the fly after identifying itself. it is almost impossible to break it during the session.
on the other hand if you store the encrypted password, a person who gets access to it can run dictionary attack on the encrypted data for few days and get the password. there are tools available for this online. its not "just a theory". ever heard of john the ripper?
 
^^what are you talking? just few days for breaking 256 bit key based encryption? Please read the theory at least, before making such comments.
 
Back
Top