Weblog entry #3 for yaarg
I figured it's about time I got serious about online security and started using different passwords for every site I use and to additionally keep track of every site I sign up for in the first place. I know this feature is available within in Firefox but I'd prefer a standlone and more robust solution (can use it for keeping things like ssh login details too).
Cheers,
James
Comments on this Entry
It works pretty good, and now i can't live without... because now i use a really different password for each need (website, forum, IM, database, login, etc....), but still don't use it for my principals shell logins (home, work, firewall). The only problem is when i'm not at home on a win$ computer, i can't open my file... so bad :-(
[ Parent | Reply to this comment ]
[ Send Message | View Steve's Scratchpad | View Weblogs ]
I use the command line tool pwsafe. It will copy passwords and usernames into the X clipboard if you want it to, which can be handy.
Basic usage is:
# add an entry pwsafe --add
List all entrise:
$ pwsafe --list websites.advogato.org websites.advogato2.org websites.skx.livejournal.com websites.slashdot.org ...
Listing a username + password to the console:
$ pwsafe --list -up -E advogato.org Going to print login and password to stdout username for websites.advogato.org: skx password for websites.advogato.org: xxxxxx
Without the "-E" it will paste the username into your clipboard, then once pasted the password.
Pros: In debian, backport available on my site or elsewhere, and simple. The only file it touches is ~/.pwsafe.dat. It will also generate passwords for you.
Cons: No GUI, though there is an Emacs mode. Not portable to windows. Minimal interface.
I was vaguely thinking of writing about it properly here soon, but I've been busy..
[ Parent | Reply to this comment ]
[ Parent | Reply to this comment ]
And for extra security, I keep the password-file on an encrypted USB-Stick, so I may take it with me...
[ Parent | Reply to this comment ]
Use a simple text file or any other file format of your choosing and encrypt it using gpg. Personally I use a normal ascii file, and I give it the file extension .gpg so I can use vim with its GnuPG plugin:
http://www.vim.org/scripts/script.php?script_id=661
-paul
[ Parent | Reply to this comment ]
-- Andrew Williams
[ Parent | Reply to this comment ]
It is originally a Windows Application but it has been ported to Linux, MacOSX and PocketPC. I still have to use Windows and have a PocketPC so it is very convinient for me to have a password database that I always have easy access to regardless what operating system I use.
[ Parent | Reply to this comment ]