SI
SI
discoversearch

We've detected that you're using an ad content blocking browser plug-in or feature. Ads provide a critical source of revenue to the continued operation of Silicon Investor.  We ask that you disable ad blocking while on Silicon Investor in the best interests of our community.  If you are not using an ad blocker but are still receiving this message, make sure your browser's tracking protection is set to the 'standard' level.
Pastimes : Computer Learning -- Ignore unavailable to you. Want to Upgrade?


To: goldworldnet who wrote (90521)8/31/2015 11:46:01 AM
From: lrb4 Recommendations

Recommended By
goldworldnet
Gottfried
Ken Adams
shadowman

  Read Replies (2) | Respond to of 110652
 
I've been a satisfied user of LastPass since 2010. I use it to store every password I use on the web, as well as to store secure notes containing private information I might need access to when I'm away from home.

I am not a security expert, but I was convinced by this video of the value of the LastPass approach:
youtube.com
Note: this is a LONG video.

Using LastPass, nearly all of my passwords are completely random, unrememberable character strings generated by LastPass itself, such as "ick^UZk&6D0x". I don't type these passwords into web sites; LastPass fills them in for me.

There are two passwords that I must remember myself to use LastPass effectively: my LastPass master password itself, and my email password. I need to remember my email password even though LastPass remembers it for me, because if I try to use LastPass from a device that LastPass does not recognize as mine, LastPass will send me an email asking me for authorization before completing the login. In this unusual case, I need to remember my email password so I can access my email to complete the LastPass login.

Because I only need to remember two passwords, I can put a lot of effort into making those two passwords effective. My LastPass master password is a 33-character phrase that is easy to remember but includes some gibberish. Since I typically type this password at most once per day, it is not onerous to have such a long password.

The user's password database is stored on the LastPass server as an encrypted blob, and LastPass does not even have access to your master password; you need to remember it or you will lose access to all your stored passwords.

Note: The LastPass servers were hacked earlier this year. I received this email from LastPass:
Dear LastPass User,

We wanted to alert you that, recently, our team discovered and immediately blocked suspicious activity on our network. No encrypted user vault data was taken, however other data, including email addresses and password reminders, was compromised.

We are confident that the encryption algorithms we use will sufficiently protect our users. To further ensure your security, we are requiring verification by email when logging in from a new device or IP address, and will be prompting users to update their master passwords.

We apologize for the inconvenience, but ultimately we believe this will better protect LastPass users. Thank you for your understanding, and for using LastPass.

Regards,
The LastPass Team


Steve Gibson's discussion of this security breach can be viewed here:
youtube.com

LRB



To: goldworldnet who wrote (90521)8/31/2015 3:23:23 PM
From: Eric L2 Recommendations

Recommended By
goldworldnet
Ken Adams

  Read Replies (1) | Respond to of 110652
 
Password Managers: LastPass ...

lastpass.com

<< This is a review of different password managers.>>

I have no reservations whatsoever about recommending LastPass without hesitation to neophyres or power users. I now use the modesrly priced premium version on 2 desktops, a Samsung Galaxy Android smartphone, my Amazon (Kindle) Fire¹ and my wife's prior gen Kindle Fire¹. Update one, all are updated. A Terrific best of breed software app. Indispensable so far as I'm concerned. Likewise most knowledgeable reviewers. It is a suprisingly powerful program with excellent tools and customizability..

¹ The LastPass review You linked lists a lastPass 'Con' as "Doesn’t work on the Kindle very well." As Amazon reviewers note, however. LastPass works differently on Fire than other mobile devices ... but it works and syncs with a users master list of passwords.

I first recommended LasPass on this board in this post back in 2012.

Gizmo Richards whose advice I much respect recently updated the post that originally convinced me to try LastPass (free) back in 2012 on 2 desktops and a laptop....



techsupportalert.com

Cheers, - Eric L. -



To: goldworldnet who wrote (90521)9/1/2015 2:16:07 PM
From: Eric L1 Recommendation

Recommended By
goldworldnet

  Respond to of 110652
 
Are Password Managers Safe? (Leo Notemboon's Important very well Considered Opinion) ...

... an absolute must read IM**HO and same for the article linked at the end of this post in re the June LastPass breach.



Read the full text here: askleo.com

Some readers comments after the article are also worth a read.

Also in re the June LastPass 'Security breach' IF it can really be called that, read Leo's comments on the subject ("Has LastPass had a security breach?" ) here: ask-leo.com

Leo is an Internet Security guru and also a LastPast user and long time LastPass proponent.

- Eric L. -



To: goldworldnet who wrote (90521)9/1/2015 8:25:02 PM
From: Eric L2 Recommendations

Recommended By
goldworldnet
Gottfried

  Respond to of 110652
 
PC Mag's 'Best Password Managers' [Paid and Free]

[Previously linked by Josh]

Full articles and reviews are here: pcmag.com & pcmag.com Some excerpted text and graphics below.





The Best (Paid & Free -- the 3 'Editors Choices' including the 2 highest rated are:



- Eric L. -