Steveshank.com Home      Newsletters Home
Saving Passwords
 
I will periodically discuss issues related to password security. Two earlier articles can be found in my newsletters online at: http:⁄⁄www.steveshank.com⁄Newsletters⁄Newsletters.htm
 
You can find them by selecting from the left navigation:
Safe Computer⁄General Safety. They appeared in January and June of 2004.
 
Internet Explorer
If you save passwords in Internet Explorer, then anyone can effortlessly view and see your passwords quickly and easily. Therefore, they are not safe at all. There are plenty of free password cracking programs for Internet Explorer. These programs also exist in a free or inexpensive form for most large commercial programs like: Quicken, Quickbooks, Excel, Visual Basic, Access, Act and so forth. Their encryption has been broken and is sold cheaply or given away.
 
SlimBrowser
Using Slimbrowser for saving passwords is the same as using Internet Explorer.
 
Firefox or Mozilla
If you use the privacy policy of having a master password, and letting Firefox save passwords for you, then FireFox will encrypt your passwords. If you do not have a master password, then the passwords are not encrypted. To my knowledge the encryption has not yet been broken, but I do not know how they do it. Encryption is OFF by default though!!! So, if you use their password saving, then turn it on, and password protect your password file. That is done from the Tools⁄Options⁄Privacy menu.
 
RoboForm
In addition to using my own password program (available at http:⁄⁄www.steveshank.com⁄passdown.html for free), I use Roboform. RoboForm gives you state of the art encryption based on passwords and it automagically fills out web forms. So, when I get to a form online requiring credit card information or name and address information, Roboform pops up and offers to fill it out for me. It does, I review and submit it. Roboform makes it so much easier to buy stuff! In addition it stores passwords and maintains security. RoboForm has some free version, but I use the $30 one. They upgrade their product and are constantly making it better.
 
Last month they added Pass2go, which is a portable Roboform license. This allows Roboform users to purchase a $10 license that lets them install RoboForm on a Flash drive (or other portable device) and run RoboForm off that drive. This system allows you to take your passwords anywhere and use them without leaving any tracks on the computer you are using. The program, the data, and any temporary files are all on your Flash Drive. When you pull the drive, access is removed. If you go somewhere else, insert the drive and all your passwords are there including the form filling ability of RoboForm.
 
Roboform (both desktop and portable) allow you to make safenotes as well as passwords for multiple different personalities. So one personality can be the personal me, another can be my "Consultant self". The consultant self could have access to client passwords, while the personal self could access my own credit cards and notes about the work done.
 
FingerPrint Flashdrives
For $70 Lexar makes a FlashDrive for recording and encrypting passwords that relies on your fingerprint. http:⁄⁄www.lexar.com⁄jumpdrive⁄jd_touchguard.html. Is that cool or what!?
 
Using Passwords on Other Computers
Your passwords may be safe, but other computers could already be infected with a password logging trojan so when you use the password it is picked up and recorded by that trojan. Even "two factor authentication" won't help here. With two factor authentication (like a bank card), you need both the physical card, and the pin number. So the "two factor authentications" rely on something you have like a flashdrive and also a password. But a Trojan on the computer can still steal it.
 
 
 
 
 
 
 
Previous  |  Next ]     [ Up  |  First  |  Last ]     (Article 133 of 269)
 
Copyright (c) by Steven Shank 2006
Steveshank.com Home
Newsletters Home

I attempt to provide reliable information, but make no warranty as to the accuracy or safety of these articles. I disclaim all legal responsibility for what following these instructions may do. Follow my advice at your own risk