Password managers - Revision history

Pelibby16 at 20:44, 27 January 2026

2026-01-27T20:44:15Z

← Older revision		Revision as of 20:44, 27 January 2026
Line 4:		Line 4:
	# On your password manager application of choice, create an account with a very strong password or (preferably) pass phrase		# On your password manager application of choice, create an account with a very strong password or (preferably) pass phrase
	# Store all your other passwords in that account		# Store all your other passwords in that account
	# Start replacing bad passwords with strong passwords that you ~~don�t~~ need to remember.		# Start replacing bad passwords with strong passwords that you don't need to remember.
	It can autofill in your browser using a browser extension, and you can copy-paste to applications on mobile devices. There's a million details, but that's the principle.		It can autofill in your browser using a browser extension, and you can copy-paste to applications on mobile devices. There's a million details, but that's the principle.

Pelibby16 at 20:44, 27 January 2026

2026-01-27T20:44:10Z

Craigje at 16:39, 25 January 2019

2019-01-25T16:39:20Z

← Older revision		Revision as of 16:39, 25 January 2019
Line 18:		Line 18:
	* I picked the Verge article essentially at random - you can search the Internet for similar pieces from your choice of tech sources, security blogs, etc.		* I picked the Verge article essentially at random - you can search the Internet for similar pieces from your choice of tech sources, security blogs, etc.

	~~I strongly recommend using one, and we're considering requiring all our sysadmins to use one next semester~~.		These will be mandatory.

Craigje: Created page with "A while ago we discussed password managers at a meeting. I got a sense that most people liked the idea, a few people had some specific issues, and in general people wanted som..."

2018-11-09T16:11:05Z

Created page with "A while ago we discussed password managers at a meeting. I got a sense that most people liked the idea, a few people had some specific issues, and in general people wanted som..."

New page

A while ago we discussed password managers at a meeting. I got a sense that most people liked the idea, a few people had some specific issues, and in general people wanted some direction. It�s taken me quite a while to return to the subject, but here it is. If you don�t read the rest of this, please at least note that I strongly encourage them and that we�re considering requiring them for all our sysadmins next semester.

Password manager basics:
# On your password manager application of choice, create an account with a very strong password or (preferably) pass phrase
# Store all your other passwords in that account
# Start replacing bad passwords with strong passwords that you don�t need to remember.
It can autofill in your browser using a browser extension, and you can copy-paste to applications on mobile devices. There�s a million details, but that�s the principle.

Some specific options for password manager applications (there are many others):
* KeePass: most popular open-source password manager; versions exist for all OS families
* LastPass: the most popular password manager, and the one I personally use - cross-platform, syncs between devices, easy to learn, you can subscribe for sharing tools but the basic functions are free
* 1Password: a subscription-only service, people who use it seem to like it a lot; see a local alum�s writeup from 2013: https://chrishardie.com/2013/01/1password-password-management-review/
* others are free to send along recommendations

If you want to read more:
* Here�s [https://www.theverge.com/2017/7/24/15921282/best-password-manager-1password-lastpass-dashlane-how-to a rundown on password managers and their importance]. From a security standpoint, which we as sysadmins care the most about, a password manager lets us avoid most instances of weak passwords, duplication, etc. From the perspective of a user, I enjoy not having to manage my own passwords (I only remember 5 or so, out of over a hundred, and I don�t have to make up long strings of characters or rules to make them).
* Here�s [https://www.theverge.com/2017/7/24/15921282/best-password-manager-1password-lastpass-dashlane-how-to#437103615 a comment by the author of the piece acknowledging and addressing the problem that password managers create a single-point-of-failure]. TL;DR most every security measure has tradeoffs, you can address some of them with two-factor authentication (another important subject!), and no piece of technology will solve ALL security problems.
* I picked the Verge article essentially at random - you can search the Internet for similar pieces from your choice of tech sources, security blogs, etc.

I strongly recommend using one, and we're considering requiring all our sysadmins to use one next semester.

← Older revision		Revision as of 20:44, 27 January 2026
Line 1:		Line 1:
	A while ago we discussed password managers at a meeting. I got a sense that most people liked the idea, a few people had some specific issues, and in general people wanted some direction. taken me quite a while to return to the subject, but here it is. If you read the rest of this, please at least note that I strongly encourage them and that considering requiring them for all our sysadmins next semester.		A while ago we discussed password managers at a meeting. I got a sense that most people liked the idea, a few people had some specific issues, and in general people wanted some direction. It's taken me quite a while to return to the subject, but here it is. If you don't read the rest of this, please at least note that I strongly encourage them and that we're considering requiring them for all our sysadmins next semester.

	Password manager basics:		Password manager basics:
	# On your password manager application of choice, create an account with a very strong password or (preferably) pass phrase		# On your password manager application of choice, create an account with a very strong password or (preferably) pass phrase
	# Store all your other passwords in that account		# Store all your other passwords in that account
	# Start replacing bad passwords with strong passwords that you need to remember.		# Start replacing bad passwords with strong passwords that you don�t need to remember.
	It can autofill in your browser using a browser extension, and you can copy-paste to applications on mobile devices. a million details, but the principle.		It can autofill in your browser using a browser extension, and you can copy-paste to applications on mobile devices. There's a million details, but that's the principle.

	Some specific options for password manager applications (there are many others):		Some specific options for password manager applications (there are many others):
	* KeePass: most popular open-source password manager; versions exist for all OS families		* KeePass: most popular open-source password manager; versions exist for all OS families
	* LastPass: the most popular password manager, and the one I personally use - cross-platform, syncs between devices, easy to learn, you can subscribe for sharing tools but the basic functions are free		* LastPass: the most popular password manager, and the one I personally use - cross-platform, syncs between devices, easy to learn, you can subscribe for sharing tools but the basic functions are free
	* 1Password: a subscription-only service, people who use it seem to like it a lot; see a local writeup from 2013: https://chrishardie.com/2013/01/1password-password-management-review/		* 1Password: a subscription-only service, people who use it seem to like it a lot; see a local alum's writeup from 2013: https://chrishardie.com/2013/01/1password-password-management-review/
	* others are free to send along recommendations		* others are free to send along recommendations

	If you want to read more:		If you want to read more:
	* [https://www.theverge.com/2017/7/24/15921282/best-password-manager-1password-lastpass-dashlane-how-to a rundown on password managers and their importance]. From a security standpoint, which we as sysadmins care the most about, a password manager lets us avoid most instances of weak passwords, duplication, etc. From the perspective of a user, I enjoy not having to manage my own passwords (I only remember 5 or so, out of over a hundred, and I have to make up long strings of characters or rules to make them).		* Here's [https://www.theverge.com/2017/7/24/15921282/best-password-manager-1password-lastpass-dashlane-how-to a rundown on password managers and their importance]. From a security standpoint, which we as sysadmins care the most about, a password manager lets us avoid most instances of weak passwords, duplication, etc. From the perspective of a user, I enjoy not having to manage my own passwords (I only remember 5 or so, out of over a hundred, and I don't have to make up long strings of characters or rules to make them).
	* [https://www.theverge.com/2017/7/24/15921282/best-password-manager-1password-lastpass-dashlane-how-to#437103615 a comment by the author of the piece acknowledging and addressing the problem that password managers create a single-point-of-failure]. TL;DR most every security measure has tradeoffs, you can address some of them with two-factor authentication (another important subject!), and no piece of technology will solve ALL security problems.		* Here's [https://www.theverge.com/2017/7/24/15921282/best-password-manager-1password-lastpass-dashlane-how-to#437103615 a comment by the author of the piece acknowledging and addressing the problem that password managers create a single-point-of-failure]. TL;DR most every security measure has tradeoffs, you can address some of them with two-factor authentication (another important subject!), and no piece of technology will solve ALL security problems.
	* I picked the Verge article essentially at random - you can search the Internet for similar pieces from your choice of tech sources, security blogs, etc.		* I picked the Verge article essentially at random - you can search the Internet for similar pieces from your choice of tech sources, security blogs, etc.

	These will be mandatory.		These will be mandatory.