Jumping Ship
The initial process of getting your password manager configured with all of your login credentials can involve some serious work. If you decide to switch, you'll want a product that doesn't force you to go through the whole process again. LastPass 3.0 will import passwords from over 30 of its competitors; KeePass handles even more formats.
The initial process of getting your password manager configured with all of your login credentials can involve some serious work. If you decide to switch, you'll want a product that doesn't force you to go through the whole process again. LastPass 3.0 will import passwords from over 30 of its competitors; KeePass handles even more formats.
On the flip side, many password managers that don't have that kind of eclectic import skills can at least import from LastPass.
If you're starting from scratch, chances are good you've used your browser's built-in password management feature. LastPass and Dashlane will import those passwords, delete them from the browser, and turn off the browser's password management. Dashlane imports from Internet Explorer, Firefox, and Chrome; my1login handles those three plus Opera; LastPass goes for a clean sweep, importing from Safari along with the other four.
Beyond the Master Password
All of the password managers in this roundup support authentication using a master password. Since it's protection all of your other passwords, that one needs to be reallystrong. But if that's the only protection for your data, a crook who manages to steal your master password has the keys to your kingdom. The best password managers offer two-factor authentication.
All of the password managers in this roundup support authentication using a master password. Since it's protection all of your other passwords, that one needs to be reallystrong. But if that's the only protection for your data, a crook who manages to steal your master password has the keys to your kingdom. The best password managers offer two-factor authentication.
RoboForm and LastPass 3.0 Premium can be configured for fingerprint-based authentication. DashLane and LastPass support authentication via the Google Authenticator mobile app. Stealing the master password for hardware-based MyLOK Personal won't do a thief any good without also having the physical device.
The brand-new F-Secure Key is an interesting case. The free, one-device version only works on the device where you've installed it, so if you retain possession of the device, your passwords are safe. For $15.99 per year you can upgrade to a version that will sync any number of PC, Mac, Android, or iOS devices. However, adding a new device requires a transient code generated on your mobile device as well as the master password. Two-factor authentication is effectively the default with this product.
Password Capture and Replay
Most, but not all, password managers integrate with the browser to capture login credentials as you enter them and replay those credentials when you revisit the site. Password Genie 4.0, Dashlane, and LastPass go a step beyond, actively detecting and managing password change events and capturing credentials as you sign up for a new service.
Most, but not all, password managers integrate with the browser to capture login credentials as you enter them and replay those credentials when you revisit the site. Password Genie 4.0, Dashlane, and LastPass go a step beyond, actively detecting and managing password change events and capturing credentials as you sign up for a new service.
F-Secure Key, KeePass, and my1login are a bit different. With all three of these products, you initially enter your credentials manually. F-Secure Key requires a special keystroke to fill login forms. My1login replays passwords using a bookmarklet, so it works in any Java-equipped browser. KeePass offers an elaborate replay technology designed to confound keyloggers.
Quite a few password managers let you log in to your password storehouse from any browser, so you can look up credentials even when using someone else's computer. Among these are Norton Identity Safe, RoboForm Everywhere 7, and Keeper 5.0; LastPass and Dashlane also offer this feature. F-Secure, by contrast, doesn't allow any online access, considering it a potential security risk.
Form Filling and Personal Data
Given that most password managers already have the ability to fill your username and password into a login form, it's not surprising that many also serve as form fillers for personal data. RoboForm is probably the most flexible, but DashLane and LastPass will cleverly offer to capture what you've entered if they see you filling a form manually.
Given that most password managers already have the ability to fill your username and password into a login form, it's not surprising that many also serve as form fillers for personal data. RoboForm is probably the most flexible, but DashLane and LastPass will cleverly offer to capture what you've entered if they see you filling a form manually.
1Password for Windows stores more types of personal data than most, but not all of what it stores can be used to fill forms. Password Genie, LastPass, and Dashlane can store various types of ID data such as passports and driver's licenses. Dashlane even displays them realistically, for example, formatting the driver's license to match the state it's from.
Free Protection
KeePass and Norton Identity Safe are free, period. The free edition of LastPass has almost everything found in the premium; support for mobile devices is the big exception. You can use Dashlane or F-Secure for free on a single device; syncing requires the paid edition. The free edition of Password Box is fully functional, but stores only 25 passwords.
KeePass and Norton Identity Safe are free, period. The free edition of LastPass has almost everything found in the premium; support for mobile devices is the big exception. You can use Dashlane or F-Secure for free on a single device; syncing requires the paid edition. The free edition of Password Box is fully functional, but stores only 25 passwords.
You can use RoboForm Everywhere on all your devices for free, as long as you don't need more than 10 passwords. Basic features for my1login are free; going pro gets you the ability to categorize and organize your saved passwords. The pro edition also removes an advertising panel and adds the unrelated ability to post on multiple social media accounts at once.
Clearly there are plenty of free solutions, but even the paid solutions can be inexpensive. LastPass Premium costs a dollar a month, as does Password Box. You'll pay $15 each year for Password Genie, $16 for F-Secure Key, and $20 for Dashlane. That's not a lot, considering what they're protecting.
Security Checkup
Virtually every password manager will report the strength of your master password. Norton, RoboForm, KeePass, and quite a few others can also rate each of your stored passwords. And virtually every product will generate strong, random passwords for you on demand.
Virtually every password manager will report the strength of your master password. Norton, RoboForm, KeePass, and quite a few others can also rate each of your stored passwords. And virtually every product will generate strong, random passwords for you on demand.
LastPass and Dashlane take this concept a step beyond. Each offers a security report listing all of your passwords and rating the strength of each. They also report on duplicates—passwords you've used on more than one site. And they make it easy to upgrade all your passwords to improve security. Very impressive!
Source : PCMag
Password security is a joke. I’ve been an IT contractor for over a dozen different companies on various projects and the way that employees share with utter disregard for security protocol is scary. I’m surprised more companies don’t get hacked into. They all need to start using a serious password manager like PasswordWrench yesterday.
ReplyDelete