Re: [Wlug] Cross platform password management
A text file in a TrueCrypt container? Logan On Nov 15, 2014 6:22 PM, "Frank Sweetser" <fs@wpi.edu> wrote:
Hey all,
I'm looking to overhaul my password management, so I'm looking for suggestions on what apps people are using. My ideal system would have at least these features:
- cross platform on windows, Linux, and android - synchronize via 3rd party cloud storage, preferably google drive - *not* via an app specific service - good Firefox plugin
Any suggestions on what to try, or to avoid, would be greatly appreciated. Thanks all! -- Sent from my Android device with K-9 Mail. Please excuse my brevity. _______________________________________________ Wlug mailing list Wlug@mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug
FWIW, +1 for LastPass, though as stated, it does not suit your purposes (both the Chrome and FF plugins are just dandy, a nod to the FF one though). BTW, why the tendency to want to give yet more data to Google? Personally, I'm with Chuck - this data does NOT belong on the cloud, period. Unfortunately I've (so far) failed to organize myself well enough to keep the data outside of the cloud and also accessible [at least without using my own chosen methods of encumbrance on the data], so, LastPass it is for now, for me anyway. Related question: personal cloud/data access solutions? I'm guessing the preference here is a replicate-with-a-friend(s) personal encrypted storage system and CLI/SSH access to such storage. Best of luck! --Chris On Sat, Nov 15, 2014 at 9:19 PM, thinkbrown@gmail.com <thinkbrown@gmail.com> wrote:
A text file in a TrueCrypt container?
Logan On Nov 15, 2014 6:22 PM, "Frank Sweetser" <fs@wpi.edu> wrote:
Hey all,
I'm looking to overhaul my password management, so I'm looking for suggestions on what apps people are using. My ideal system would have at least these features:
- cross platform on windows, Linux, and android - synchronize via 3rd party cloud storage, preferably google drive - *not* via an app specific service - good Firefox plugin
Any suggestions on what to try, or to avoid, would be greatly appreciated. Thanks all! -- Sent from my Android device with K-9 Mail. Please excuse my brevity. _______________________________________________ Wlug mailing list Wlug@mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug
_______________________________________________ Wlug mailing list Wlug@mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug
So my scenario is that (like many others) I have multiple devices I want to access the data from. In my case I primarily use a linux desktop, and windows laptop, and android phone. The simplest case, SSH'ing in, might be how I go, but it's way low on the usability scale compared to a nicely designed app, especially on android where SSH is a last resort without a decent hardware keyboard. I actually prefer Google over a storage backend that's tightly coupled with the app, for the simple reason that it prevents any chance of the backend storage location having any privileged access to the data. Google (or dropbox, or whatever) is just a dumb bag of bytes, so there's no risk of a hushmail style exploit: http://www.wired.com/2007/11/encrypted-e-mai/ (Not that I'm worried about the Feds, the possibility of server side encryption in the workflow makes things a little too tempting for hackers IMHO.) Once the data is assumed to be reasonably secure (where "reasonable" of course depends on the exact credentials stored), letting the already-secured data hang out on Google drive is a decent trade off in security vs usability. Long term I've considered setting up OwnCloud on my box at home, but that's not something I have time to play with right now... Frank Sweetser fs at wpi.edu | For every problem, there is a solution that Manager of Network Operations | is simple, elegant, and wrong. Worcester Polytechnic Institute | - HL Mencken On 11/15/2014 9:28 PM, Chris Thompson wrote:
FWIW, +1 for LastPass, though as stated, it does not suit your purposes (both the Chrome and FF plugins are just dandy, a nod to the FF one though).
BTW, why the tendency to want to give yet more data to Google? Personally, I'm with Chuck - this data does NOT belong on the cloud, period. Unfortunately I've (so far) failed to organize myself well enough to keep the data outside of the cloud and also accessible [at least without using my own chosen methods of encumbrance on the data], so, LastPass it is for now, for me anyway.
Related question: personal cloud/data access solutions? I'm guessing the preference here is a replicate-with-a-friend(s) personal encrypted storage system and CLI/SSH access to such storage.
Best of luck! --Chris
On Sat, Nov 15, 2014 at 9:19 PM, thinkbrown@gmail.com <mailto:thinkbrown@gmail.com> <thinkbrown@gmail.com <mailto:thinkbrown@gmail.com>> wrote:
A text file in a TrueCrypt container?
Logan
On Nov 15, 2014 6:22 PM, "Frank Sweetser" <fs@wpi.edu <mailto:fs@wpi.edu>> wrote:
Hey all,
I'm looking to overhaul my password management, so I'm looking for suggestions on what apps people are using. My ideal system would have at least these features:
- cross platform on windows, Linux, and android - synchronize via 3rd party cloud storage, preferably google drive - *not* via an app specific service - good Firefox plugin
Any suggestions on what to try, or to avoid, would be greatly appreciated. Thanks all! -- Sent from my Android device with K-9 Mail. Please excuse my brevity. _______________________________________________ Wlug mailing list Wlug@mail.wlug.org <mailto:Wlug@mail.wlug.org> http://mail.wlug.org/mailman/listinfo/wlug
_______________________________________________ Wlug mailing list Wlug@mail.wlug.org <mailto:Wlug@mail.wlug.org> http://mail.wlug.org/mailman/listinfo/wlug
_______________________________________________ Wlug mailing list Wlug@mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug
participants (3)
-
Chris Thompson
-
Frank Sweetser
-
thinkbrown@gmail.com