Passwords *shake fists*

[TooNice]

Okay, I give in. Until now I've never memo-ed a single password (on paper or electronically), but I am simply dealing with too many passwords. It's not an issue for things that I type fairly regularly, but there are certain places where I do not log in often (once every couple of months) with strong password requirements, and prevent re-using a previously used password. So I put all the effort to make a strong password that I can usually remember, but briefly forget it during a brain fart moment under stress, change to new password that so that I can access in a hurry (and since it's done in a hurry, the new password may be weaker and less memorable in the long term than the old one), only to remember 5 min later but it's no longer possible restore it because it's an "old" password.

This has happened enough time that I've had enough. Is there any good, trusted password manager out that that is either free or pretty affordable? Strong encryption aside, I'd ideally like to see something that makes it a bit resistant to key-loggers (e.g. a pin that requires a mouse to input on a randomised virtual keyboard or something).

[g8ina]

Ive used LastPass for the last few years, never had any probs despite a recent 0 day possible threat.

[cptwhite_uk]

LastPass seconded. Can auto generate unique strong passwords for you so you just remember a master key password. Can't imagine life without it now.

[GoNz0]

And those who use edge can have the plugin with the anniversary update of windows 10

[spacein_vader]

Keepass. It's open source, widely supported and pretty robust.

[Elspuddy]

3rd for lasspass

[Smudger]

Didn't Lastpass just get hacked?

[kalniel]

Didn't Lastpass just get hacked?

Yep:

Ive used LastPass for the last few years, never had any probs despite a recent 0 day possible threat.

[GoNz0]

Yep:

it was part of the find and reward scheme they operate so no data was stolen, worst case was the person using the browser may have had that logged in users passwords exposed.

[aidanjt]

If you don't want to peg yourself to a particular cloud provider (or indeed, any), there's always Enpass or 1Password.

On the Linux/open sauce side, there's the pass commmand, or it's GUI wrapper, QtPass. Moving it to cloud or synced storage is a simple matter of moving your ~/.password-store directory into your cloud/sync directory and symlinking it back to ~/.password-store.

[Splash]

Yep:

"hacked" vs "vulnerability disclosed". Not quite the same thing.

[Iconix]

I also use LastPass. Best to keep an offline copy of your passwords too in case their site gets taken down or other SHTF scenarios though.

[AGTDenton]

I have a weird system that works well for me.

I store hints only understandable to me in an encrypted and passworded spreadsheet. It does not contain the full password nor does it contain any part of the username/email. It merely contains a hint as to which password I used for what site, also the full website information is not stored.

I remember the username/email based on the type of website it is. I use a variety of email providers to manage importance/convenience. For example important emails i.e. ones from banks, or any site that has my card details, are only stored on the mail host for a maximum of 90 days before they are all wiped, making sure any Email hacker gains minimal information, I tend to manually wipe Emails from the mail host every 2 weeks when I know I've downloaded them offline to an encrypted PST file should I need to reference it in future.

This isnt a system I dreamt up in a single day, just something that has morphed over the past 20 years

[Gerrard]

I do something similar. I have a couple of simple algorithms and simply store the key (usually based on the site) and a hint to which one I used.

[peterb]

I'm still looking for a way to access Apple's_keychain from an Android_device, a search I fear is doomed to fail.

[Jonj1611]

Having asked this question myself recently, I now use Lastpass. And when I looked through the list of sites I use and various usernames and passwords I am glad I have it!