SillyDog701

[James]

Since FF has several extensions that act as password managers, I suppose this folder is the best place to put this post. Like most folks who use the internet, I use relatively weak passwords (and I've a tendency to use just a couple for all the sites I go to) for the simple reason that my memory is lousy and it's more convenient to do it this way. Not good; especially from a security standpoint.

What do the rest of you do (use?)? What do you find easiest in order to manage your passwords? How often do you change them?

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1 (.NET CLR 3.5.30729)

[Antony]

To me, it depends.
For website forums etc, I let the browser to fill in the login for me automatically. For other more financial related logins, I don't let the browser to memorise the passwords.

Personally, I use a brilliant software called Yojimbo to record all my login/passwords (encrypted), software or even hardware serial numbers, and many other bits and pieces of information (can be encrypted). And just one master password to remember. And best of all, it syncs with multiple computers (MobileMe subscription is required).

Back to the topic, how often do I change them? Generally I don't, unless the website forces me to change it. But once in a blue moon I might decide to change some passwords.

UserAgent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.0.11) Gecko/2009060214 Firefox/3.0.11

[Don_HH2K]

I personally just use the password manager built into Firefox for simplicity's sake. On top of that I use a master password to make sure that it won't go autofilling usernames and passwords whenever somebody opens Firefox. As an added layer of security I have everything in my Application Data folder, which includes my Firefox profile and therefore my password list, encrypted using EFS, which is built into Windows.

Typically I randomly generate forum passwords and such using OpenSSL. It's only for things like my bootup password that I use something that's easy to remember.

I do expire my passwords every so often, but I don't do it on any recurring schedule.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.1) Gecko/20090718 Shiretoko/3.5.1

[James]

Okay... first off, thanks for the feedback. Using a program such as Roboform (or any equivalent) raises a number of questions, especially in the How To department. I know there are tutorials and I've looked them over but it always leaves the question: what is generally the best way to use such a program when using it primarily as a password manager?

I know it offers the option of generating passwords (and then remembering them) for each site.
I know it offers the option of setting a master password.
I know it automatically logs you into the various sites wihtout your having to type anything. Now... so does having your browser (i.e. Firefox) remember the passwords and that raises the question: is it best to delete all the stored passwords from FF once you decide upon using Roboform... particularly if you're having it generate random passwords?

I suppose what I'm asking is this: how do those of you who have these programs make the best use of them? I'd like to hear some of your methods of operation. Thanks.

UserAgent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 1.1.4322)

[richard mitnick]

I use Roboform for FF and IE. In SM, it is unnecessary, as with SM you can have it save everything and anything, including MyYahoo!

Roboform is easy as pie. Just download and install. When you sign on to a site, Roboform will ask if you want to save the user id and password and suggest a name. Click yes if you want to save it. The first 10 are free. After that, there is a small one time charge. All updates (so far) have been free.

I have paid once and - pacem Fulvio - I have copied the download to three other computers and then just copied over the data file.

There is a password manager to lock out other people if you wish.

Roboform is available for FF, IE, SM (again, unnecessary for SM). It will soon be available for Safari for Mac, but not for Windows. (I have been to them to say, with the Mac installed user base at between 8-9% of the total PC world, and with the number of Mac users who have adopted FF, it is quite possible that there are more Safari users on Windows ( me among them) than there are on Mac.)

>>RSM

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1 (.NET CLR 3.5.30729)