Tag Info

Hot answers tagged

40

I suggest the use of Keepassx, an cross-platform password manager, and Dropbox. Create your password database with Keepassx and then synchronize it across all of your computers using Dropbox. I've used this approach for about a year and a half with no issues. (I should also mention that Dropbox keeps older revisions of files so even if your database is ...


23

I've never looked into its security, but LastPass (http://lastpass.com/) is designed to do just that


17

"No" is the correct answer--you should never give away your password. Gmail now supports OAuth, an industry standard protocol, enabling you to give your consent for specific access to your mail without sharing your password.


11

All encryption/decryption occurs on your computer, not on our servers. This means that your sensitive data does not travel over the Internet and it never touches our servers, only the encrypted data does. [...] Your encryption key is created from your email address and Master Password. Your Master Password is never sent to LastPass, only a ...


10

There's a lot of other questions answering this. Searching for openid would have helped you to find them easily. Anyway, the google openid is www.google.com/accounts/o8/id An advice, remove the plain text reference of your email address so that it won't be picked up by robots crawling the web.


10

To have a secure two-way communication, parties either need a shared secret or must have a private/public key pair. When you connect to your bank's website TLS is used. In the typical case the asymmetrically encrypted channel is used to establish a symmetrically encrypted channel. When establishing a communication channel (called "handshaking"), your ...


9

Using 2-step authentication You can't log in to Google services without your password. What you can do however is activate 2-step verification: 2-step verification requires two independent factors for authentication, much like you might see on your banking website: your password, plus a code obtained using your phone. It's an extra ...


8

Take a look at lastpass.com - I have no connection to them other than as a satisfied user.


6

I recommend not giving them their password. In every case I've seen a service demand that, it does make your life easier, but is entirely optional, and letting people into my Gmail account for a few seconds of convenience is completely not worth it. I'd prefer the pain of simply entering things manually later. Your solution also works, although I agree it's ...


6

I'd change your password. It looks like those IPs that accessed your email were from this company: http://www.seven.com I'm not familiar with their software, but it looks like they offer some mobile apps that could have accessed your email. I don't think anything malicious is going on.


6

Ok. What happens? Well, depending on the path you follow, different things. For example, you can be asked to fill out a form that asks you questions regarding information relating to your account, as is described in this article. Then, as that article says, someone at Facebook reviews the information and checks it against what they already have. Once ...


5

I personally like the hosted manager a bit better as long as the security is implemented properly. Take LastPass for example (my favorite), they don't store an un-hashed version of your master password so without deliberately cracking your passwords, even the site host can't access your information. This is of course only as good as your trust for the ...


5

You should run the other way as fast as you can. Don't ever give out your email password unless it is to a junk account. Ask yourself this. Have I used this email address for any of my online banking, bill payments, or anything else that I would not want everyone on the internet to see? If the answer is yes I have used this email address for this then ...


5

Use KeePass and use a single KeePass DB (kdb file) stored on a shared drive or in a DropBox. Store all your passwords in that databse and they can all access it.


5

The password manager LastPass has a screen keyboard and also one-time-use passwords. The screen keyboard is specifically to avoid key loggers and one-time-use limits the value of the password if it is intercepted..


5

Skype had some major problems. In some regions you are still being redirected to http://www.skype.com/intl/en-us/StatusUpdate/ which itself redirects to the blog. The same issue when testing with Web-Sniffer: Connect to 78.141.177.141 on port 443 ... ok GET /account/password-reset-request HTTP/1.1 Host: login.skype.com Connection: close Accept-Charset: ...


5

Go to your Firefox components folder. The default path is C:\Program Files\Mozilla Firefox\components Now open the file nsLoginManager.js with a text viewer (Notepad or Notepad++). Go to the function at around line 804 (varies with version of Firefox), which is: /* * _isAutoCompleteDisabled * * Returns true if the page requests autocomplete be ...


5

If you don't want to set up the 2-step verification for your Google Account (see slhck's answer), you could always create a new Google account just for your Google Reader, and not use any of the other Google-provided services with your "reader account". You can go to the Google Reader settings, and under the Import/Export tab, export your feeds from your ...


5

I figured this out, but I wanted to post this here so others can learn. I could not find a good FAQ or help page to explain this. I changed my password using the Hotmail.com web site last night. For good security, I selected a long password of 19 characters. Logging in from the web worked fine, but when I tried to update my password on my mobile devices I ...


5

The maximum size is 100 characters. FYI, the minimum is 8.


4

If you don't own the machine, there's no way to be certain that something isn't installed to capture keystrokes. I wouldn't log into a public machine to do anything other than check the news, ever. If it's your own machine, you can use a secure (SSL/TLS) connection to your e-mail provider via someone's WiFi. That should be reasonably secure (though there's ...


4

I use http://www.clipperz.com/ it's a great open source webapp that stores passwords and even better if you want to host your own copy on your own server you can. The service includes the ability to download backups in multiple formats, import the data, setup one-time super secure access codes and even an offline copy if you need it.


4

You can reset your Hotmail password in two ways: By requesting a password reset e-mail, if you entered an alternative e-mail address for your Windows Live ID. By providing location information and the secret answer for the question you selected. After clicking Hotmail's Reset Password link, Hotmail takes you to Reset Password page along with a Captcha, ...


4

I strongly suggest that you refuse, and furthermore write a complaint to them for asking you to do such a insecure thing. It is not acceptable for any application to request access to your mail account. Rather, provide the data yourself. Update: you can also export the Contacts in CSV format from GMail, and provide that as a 'convenience'.


4

I use KeePass and it has served me well. It's free and has lots of good features. Folders for different groups (Personal, Work, etc), extra fields like URL and Notes.


4

Yes. I would the following as well. Change gmail account password immediately. Check the Last account activity (at the bottom of the page on gmail)this will probably give you an idea of the ip addresses that your gmail account was accessed from. Follow these steps if your account is compromised Use Gmail's security checklist to improve security of your ...


4

If you have doubts about it, then that's usually a pretty good "red flag" in my opinion. The issue is that you are depending on a third party to store your security-related information. It just takes one bad employee (at your company as well as at a third-party company) to breach the trust and cause a lot of problems for you, and this is why encryption is ...


4

I'd say it would be better to use a password manager plug-in like LastPass or 1Password.


4

LastPass stores data in various places depending on your operating system and browser. This information is taken from this LastPass FAQ Article Windows IE & Firefox AppData%\..\LocalLow\LastPass\ or %AppData%\..\Local Settings\Application Data\LastPass\ Chrome %AppData%\..\Local\Google\Chrome\User ...


4

GitHub does not provide any way to set custom password policies; all accounts are independent. (Implementing such support would require the passwords to be stored in a plaintext/decryptable form, which is even worse for security.) You could set up your own Git server – using Gitolite if you need detailed access control, but even pushing over plain ...



Only top voted, non community-wiki answers of a minimum length are eligible