I must say, after taking a look at Lastpass, I'm impressed. I'm seriously considering give it a try. I really like the auto fill in feature on the web browser. Something Keepass currently can't do.

I second (and maybe even third) your pain. A couple of years ago, I came across and app called "Ewallet" by Ilium Software (http://www.iliumsoft.com/). The things I like about it are:
1) there are BB and IPhone apps and they will sync
2) you can sync to multiple devices (such as laptops, etc)
3) does much more than just password (such as bank info, credit cards, etc)
4) Is password protected and encrypted
5) can be used to generate passwords as well as store them

I am NOT endorsing this product, just saying that it has worked well for me. YMMV

I also use eWallet. I keep my (password protected) password file in a private space online, so I can access the password file from home or work and it always stays in sync. There's also an Android viewer that can be synced via USB.

Keepass.info - I STRONGLY endorse Keepass (classic edition), open source, free, and multi-platform.

I have it on my Android phones as well as my computers. Best of all, Keepass is portable, so you don't have to install it. It can be backed up on a USB thumb drive.

Why would anyone use ANYTHING else other than Keepass (unless you're on a mac)??

Keepass is #1, the one I recommend and use. No need to look elsewhere. I even donated to Keepass (along with Truecrypt) because that's how useful the utility is to me.

Agree, Keepass is fully open source.

I don't like browser based passwords. Those can be potentially exploited by browser vulnerabilities, or just someone sitting in front of the PC and using the browser.

I use Keepass because it's authenticate once, use it for everything (even non password stuff like credit card info). I have it set to auto-lock after a certain time, or if the PC screen saver comes on.

I strongly dislike this product. It's not open source, pay infinitely for premium version ($1 per month - yuck), and ad supported.

I don't want my mobile security apps to have network communication access - who knows if the app isn't leaking my private info to a server on the internet for hackers?

I much prefer Keepass and Keepass Droid (on Android) that are completely free, open source, and all your data is in your control.

That's fine for casual sites, but for banking, credit card, and other websites I prefer a truly random, strong password and that's why I use keepass.

To not use something like keepass these days is irresponsible, if you're dealing with very sensitive information online.

I can recommend 1Password for OSX. It's a clean, easy to use, well integrated app that works seamlessly with Safari. The Dropbox syncing is great for set up and forget about it transferring of data to/from all devices (iPhone, iPad, Mac, PC).

I use the premium version, for $12per year. It gives me access to a lastpass client for my Blackberry.

Otherwise, the free version works fine. (I also pay to support the developers, they do a great job )

Jerry

lastpass is having some problems apparently?

http://blog.lastpass.com/2011/05/las...ification.html

(security issues; master passwd change recommended; server overload; aftermath?)

http://bits.blogs.nytimes.com/2011/0...er=rss&emc=rss

It seems that the hackers (if there were hackers) may have only gotten a small number of encrypted salted hashes. If you use a longer, non-dictionary-word password, you'll be fine.

Using a longer non-dictionary word master password is good advice, but you aren't saying that lastpass users shouldn't be concerned about this, are you?

If I were using lastpass, I certainly would change my master password, however, their servers can't handle the load from all their users changing their master passwords at the same time. So you can't just change it and expect it to work everywhere until they resolve that problem. That's an even bigger problem if you ask me. And what started all this is a data transfer that they don't understand and couldn't explain?

Maybe (eventually) some good will come of this incident, but until it does ...

To each their own, I guess.

-David

Many ways to make your own secure password
 

and make it easy to remember

if you are at site X, let's say you were born on the 7th of may .... start at the numeral 7 and "go downhill" = 7ujm ... now go to where the 5 is but GO UPHILL WITH CAPLOCKS ON = BGT5....
thus your password for site X = 7ujmBGT5

simply do variants of the above ...
home address = 3345 .. so you use 4 and 5 = password 4rfvBGT5...
etc etc ad infinitum
if you cannot remember your birthdate, house number or last 4 of mobile phone number ... you should not be allowed to touch a keyboard.

I'm certainly concerned how a leaky Asterisk box could be on the same network as boxes containing password data. Surely someone there should have split the networks up to protect our data?

Exactly why I don't trust storing my passwords online. Why keepass is still the best solution for me.