News for hackers. Stuff that matters.

Ask HN: How do you manage your passwords?

With all this heartbleed noise, it now seems like the right time to finally get my passwords in order. So I was wondering what solution do you guys use manage your passwords, SSH keys and misc credentials ?
( 15 comments | 5 points | on HN )
Re:Ask HN: How do you manage your passwords? by caleb23 on Saturday April 12, 2014 @09:32PM (#7579822)
I previously used KeePass and the password database corrupted one day. I would only use KeePass if you are comfortably keeping several backups using TrueCrypt and your system is compatible with it.

I prefer LastPass because it has more features that are valuable (I can use one tool/service instead of several), I can use it on all of my devices, it is very secure.

Re:Ask HN: How do you manage your passwords? by arijitraja on Friday April 11, 2014 @03:59AM (#7571699)
I have followed the same process as mentioned by @2810. Worth mentioning something I wrote last year - http://pivotedreality.wordpress.com/2013/08/02/i-dont-like-c...
Re:Ask HN: How do you manage your passwords? by 2810 on Friday April 11, 2014 @03:33AM (#7571636)
For credentials like facebook, emails, coinbase and etc, my password will be [identifier]_mypassword. So for example, my fb password will be facebook_yyu9023, email password will be gmail_yyu9023 and the patterns continue. Now days I just write it down and then encrypt it with a passphrase.
Re:Ask HN: How do you manage your passwords? by ereckers on Saturday April 12, 2014 @05:38PM (#7579303)
I tried the identifier route before, but there's always a few smart aleks who detect and refuse dictionary words, maybe even the domain name (can't remember exactly). These types of "systems" that live in your head, would be the best way to go if it weren't for banking, financial institutions, and government run websites.

With that being said I use LastPass for the high priority stuff and 1 basic password for sites I could care less about. Never lost one of those basic accounts yet.

Re:Ask HN: How do you manage your passwords? by jjp on Thursday April 17, 2014 @04:05PM (#7605954)
I use a variation of the identifier route which is to take the identifier and drop all the vowels from it. So not only do I get something that is easy to recreate it's also not in the dictionary.
Re:Ask HN: How do you manage your passwords? by thefinalboss on Friday April 11, 2014 @04:18AM (#7571748)
What if someone gets hold of one of your passwords and then sees that pattern and tries it out on all the other websites?
Re:Ask HN: How do you manage your passwords? by itengelhardt on Friday April 11, 2014 @04:23AM (#7571761)
In that case you are doomed. You'll have to change all passwords to all sites after one has been compromised.
Re:Ask HN: How do you manage your passwords? by yen223 on Friday April 11, 2014 @09:24AM (#7572673)
KeePassX because I'm a cheapskate. Works pretty well, as long as you're ok with syncing the password database on a public syncing service that shall not be named.
Re:Ask HN: How do you manage your passwords? by hashtag on Friday April 11, 2014 @04:05AM (#7571714)
1Password
Re:Ask HN: How do you manage your passwords? by uxjw on Friday April 11, 2014 @04:33AM (#7571791)
...which is 50% off at the moment https://agilebits.com/store
Re:Ask HN: How do you manage your passwords? by vqc on Friday April 11, 2014 @03:04AM (#7571570)
keepass/keepassx with the database syncd through the non-controversial syncing service du jour.
Re:Ask HN: How do you manage your passwords? by jackgolding on Friday April 11, 2014 @03:54AM (#7571688)
LastPass is sufficient for myself
Re:Ask HN: How do you manage your passwords? by hackerboos on Friday April 11, 2014 @04:02AM (#7571706)
I love their password vault security audits, I've been de-duping and increasing my password security with the help of this.

Lastpass Mobile now also has autofill on Chrome if you are using Android, which is great because the inbuilt browser on the Lastpass App was awful.

Re:Ask HN: How do you manage your passwords? by 0mbre on Saturday April 12, 2014 @12:40AM (#7576993)
thanks all for the suggestions, just switched all my passwords with Keepass + sync
Re:Ask HN: How do you manage your passwords? by snowwrestler on Friday April 11, 2014 @09:27AM (#7572684)
Keepass and DropBox. The encrypted password database lives in Dropbox, and the key file lives on each of my client devices. The master password lives in my head.