Password managers

[j44ke]

Since nobody else has said I will:

If you talk to any serious industry information security expert they will tell you that the most secure password storage is pen and paper and then keep that list in your wallet because these days you are more likely to have your electronic password storage system compromised than be mugged and your physical wallet stolen.


This system assumes that you are already using strong passwords and/or passphrases.

Yes, this is what my friend told me. His password system is an address book with passwords recorded like contacts. He photocopies all the pages in the address book and puts the copy in a safe place. Then when he changes a password, he recopies that page and replaces it in the copy. No one pays attention to address books any longer, he said, because everyone is focused on what's in the computer. He is the only person I know who changes all his passwords twice a year.

Also - sites that require security questions do not check the truth of your answers. "What is your mother's maiden name?" can be answered by shakesp45re$s1monk3y or ilovetoanswerquestionslikethese and doesn't have to actually be your mother's maiden name. I've had a difficult time convincing several people of this.