Fotografija tvrtke Linus Bohman.
Odgovor na naše Ask the Readers u srijedu bio je plodan; vi ste prijavili stotine odgovora. Odgovori su pokrivali vaš omiljeni softver, trikove koje ste koristili za izradu zaporki bez softvera i još mnogo toga. Počnimo s pregledavanjem popularnih aplikacija koje ste koristili za upravljanje ključnim prstenovima.
LastPass, KeePass i prolazi svih veličina
LastPass: LastPass je web-based rješenje koje čitatelji, kao cjelina, apsolutno ljubav. To čini dobro upravljanje zaporkom nevjerojatno lako. Mnogo od vas je komentirao kako ste se odupirali pokušavanju LastPass-a sve dok konačno ne dajete vrtlog i voljeli ste to (ovo zrcalo moje iskustvo da se na LastPassu samo naučilo da je bilo posve strašno kad sam konačno počela koristiti), Gouthaman ističe jednu od najboljih stvari o LastPassu:
All my passwords are offered automatically by LastPass when creating an account and they pop-up whenever I need to login. This means that I use a different password for every single web service and yeah, I don’t even remember my Twitter/Facebook/Google password, but my LastPass does!
Kaylin napominje kako je prebacivanje na LastPass revidiralo svoj pristup sigurnosti lozinkom:
LastPass Premium remembers passwords for me. Before that, I had one or two major passwords that I used for most sites. Then I came to realize that method is risky. My LastPass score was only 13 when I started using it, and now I have a much better score because I have changed my habits, thanks to LastPass.
Za znatiželjnika, Kaylin se odnosi na LastPass Security Challenge. Korisnici LastPass-a mogu preuzeti izazov - što čini lokalnu i sigurnu analizu vaših zaporki - da biste vidjeli koliko su dobre prakse zaporki. Skenira vašu lozinku trezor i provjerite da li koristite različite lozinke, multifactor autentifikaciju, i broj lozinke koje ste pohranili, a zatim dodjeljuje rezultat na temelju toga.
LastPass nudi besplatnu uslugu i vrhunsku uslugu koja košta 12 USD godišnje. Ovdje možete usporediti besplatne i premium usluge.
KeePass: Mnogi od vas jednostavno nisu bili zadovoljni s idejom da sinkronizirate vašu lozinku s konektorom u oblaku, bez obzira na to koliko je dobro moguće kodiran i testiran mehanizam. To je vladalo LastPass-om, ali vas je učinilo glavnim kandidatom za KeePass - upravitelja lozinki otvorenog koda s golemim praćenjem. KeePass nudi gotovo sve iste osnovne značajke koje ćete dobiti pomoću LastPass-slučajne generacije zaporke, organizacija koja se temelji na kategoriji - s još malo više poteškoća u sinkroniziranju stvari s vašim preglednikom. Vi dečki ste nadvladali ograničenja KeePass-a s različitim hackovima i popravcima. Dave je bio jedan od mnogih čitatelja koji su koristili Dropbox kako bi sinkronizirao njihovu KeePass bazu podataka između strojeva:
KeePass, on Dropbox for access by my several machines. On crucial sites (banking, credit cards, &c.) I use 20+ character gobbledygook passwords generated by KeePass. On many forum-type sites I use the same old user name and password, since the worst that could happen is that someone could post something in my non-recognizable name.
Doc koristi KeePass i nudi čvrstu riječ o korištenju samo nekoliko jednostavnih lozinki:
KeePass Portable on my D: drive, with another copy (program & database) on my USB drive…password protected, of course.
To those that use “1 or 2 or 12 passwords for everything”…just wait until an account is hacked and somebody you thought you could trust is rummaging through your bank account and emails. If you’re that lax in keeping your password secure, you’re probably using your birthday, your middle name, etc. to generate all these passwords…and they’re easily cracked. Use uppercase and lowercase letters, numbers, and some punctuation to generate real random passwords and store them securely! Better yet, change a few of them each week just to be safer. (Just ask Sony how much pain a hacked account can cause!)
RoboForm: Iako nije tako popularan kao LastPass i KeePass - vjerojatno zbog vrlo oslabljenog slobodnog izbora i prilično visokih cijena komercijalnih opcija - RoboForm je i dalje imao snažnu ulogu. Dostupna je kao web-based i desktop-based rješenje. Robbie nudi solidan pregled usluge ovdje:
Roboform (now known as Roboform Anywhere).
Has the advantage of automatically (and securely) synchronizing your passwords across all your instances (unlimited).
Has a very nice configurable password generator feature for times when you want maximum security or when you don’t feel like thinking of a new password.
Also lets you attach notes to each login, allowing you to save things like answers to those annoying security questions that you’ll never remember the exact answer several years from now.
If you are using someone else’s computer or don’t want to install Roboform on a particular machine, you can look up your username & password on online.roboform.com.
Roboform dolazi u tri inačice Besplatno, Desktop ($ 30) i Svugdje ($ 20 godišnje, $ 10 za prvu godinu). Ovdje možete usporediti verzije.
Korištenje mozga i analognih rješenja
[I use] 3 stages: 1) a set of words – sentence, phrase, addresses etc that you can remember – needs to make a string that is at least 50 characters long 2) an algorithm that allows you to get a set of characters from that set of words – such as every ‘n’ characters 3) write down the start point in that string, and the value of ‘n’ that you will use and the number of characters…
And – for those ‘passwords’ that require numeric values the location within the string of the numeric that will be generated from the alpha code in the string – either a=1..i=9, j=10 etc.
And for those that require a non-numeric character there is the characters associated with the number on the keyboard that you get from using the number generator from the string
So – that’s 3 numbers, and optionally – another 1 or 2 numbers. You get to write down a 5 digit code that lets you re-create the passcode, but never write down the source string so no-one else can calculate it. For the number and special character – you decide if the clue number is going to be from the string start, from the startpoint (first number), or from the end point 1st+2nd*3rd etc.
Once you have the algorithm pick a character to be the Capital letter, the number and the special character. Consistency makes it easy to remember the character selection algorithm/calculation/formula and after a while you won’t even have problems remembering the source string.
Source – string – what names etc. do you pass on the way to work – streets, shops, business names! Avoid bringing the relations [such as a spouses name] into it.
Dok je njegova tehnika temeljita, svakako je malo više posla nego samo da upravitelj lozinki slučajno generira i podsjeti lozinku za vas.
As my spouse is not computer literate (read that geek) we keep our passwords in a binder near the computer. It’s not elegant nor geeky, but it works well for us, and if I’m not available someone else that needs in can get there.
Richard uzima pristup lozinke kao recepte:
Since 1981, I’ve used index cards and index card file box. Low tech and always handy.
Edron ide stari školski put:
I have a composition notebook with all my passwords and save it in a 2 ton safe where my birth certificate and gold are stored.
Sada neki od vas možda tresu glavu na ideju spremanja zaporki na papir. Realno gledano, međutim, šanse da netko provaljuje u vašu kuću i kradu vaše lozinke je pored nula. Čak i ako je vaš dom pokopan, bit će tamo za stvari koje mogu lako prodati, poput elektronike i nakita, a ne zbog dugotrajnih stvari poput krađe identiteta i pokušaja žetve novca s vaših bankovnih računa. Možete pročitati više o našem uzeti na njega u ovom prethodnom članku Što je pogrešno s pisanjem svoje lozinke.
Da biste saznali više o tome kako vaši kolege čitatelji pohranjuju svoje lozinke, pobrinite se da na ovoj izvornoj stranici pronađete dugačak komentar. Imate li savjet ili trik za dijeljenje? Zvuči ovdje u komentarima.
