Wondering if other people use password managers?

I've been using LastPass for the last several months and have updated all of my accounts to not use any shared passwords. I feel confident in this solution, and I also have 2 factor authentication running.

It's a little bit of extra work when signing in, but well worth the additional security.


Sent from my iPad using WAYALIFE mobile app
 
GraniteCrystal said:
Actually not true. Computer systems don't store your password in plain text specifically for this reason. The software "hashes" the password using an algorithm and then stores that. Each time you log in, it hashes what you typed in and compares it to the hashed version stored in the database. It's a one way hash so there's no way to reverse the original password back out. So if you look in Eddie's database, you won't see plain text passwords ("password1", "Eddie4Life", etc) but their hashed equivalents ("jsj73hsv9&#u", "72+#jsieb$u$j2", etc)

°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°
http://wayalife.com/showthread.php?p=621404
Click to expand...
Everything depends on how you code your application :) But yes in general (good practices) you are correct. I'm sure most sites only use top notch stuff.

Sent from my galaxy s5 but it would've been quicker to drive my jeep there and tell you.
 
Last edited:
GraniteCrystal said:
Actually not true. Computer systems don't store your password in plain text specifically for this reason. The software "hashes" the password using an algorithm and then stores that. Each time you log in, it hashes what you typed in and compares it to the hashed version stored in the database. It's a one way hash so there's no way to reverse the original password back out. So if you look in Eddie's database, you won't see plain text passwords ("password1", "Eddie4Life", etc) but their hashed equivalents ("jsj73hsv9&#u", "72+#jsieb$u$j2", etc)

°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°
http://wayalife.com/showthread.php?p=621404
Click to expand...

This is good but with all of these websites getting hacked, it's just a matter of time before they brute force them. That's why I use a different password for every website no matter how "low level" it may seem. Even yahoo got hacked over two years ago and only told everyone a couple months ago.


Liston
Instagram: black_rhino_jk
 
scrhino said:
This is good but with all of these websites getting hacked, it's just a matter of time before they brute force them. That's why I use a different password for every website no matter how "low level" it may seem. Even yahoo got hacked over two years ago and only told everyone a couple months ago.


Liston
Instagram: black_rhino_jk
Click to expand...
There's a difference between getting hacked and exposing data though. You can get hacked, but if the passwords are properly salted (maybe even peppered) and then hashed, they're useless to the hackers.

°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°
http://wayalife.com/showthread.php?p=621404
 
GraniteCrystal said:
There's a difference between getting hacked and exposing data though. You can get hacked, but if the passwords are properly salted (maybe even peppered) and then hashed, they're useless to the hackers.

°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°
http://wayalife.com/showthread.php?p=621404
Click to expand...

Eh, that's what they use rainbow tables for.

Edit: Meant to say multiple iterations of. But in general yeah. Computing power and space is always pushing current design limits though.

There are a few hacks that must've had million dollar budgets and inside info based on what took place (a certain anti-Iranian virus comes to mind) but I don't think any real person has to worry about this.

Edit 2: Actually if the application can be compromised it's probably better to quietly take over the application and use that to collect new user passwords.

Sent from my galaxy s5 but it would've been quicker to drive my jeep there and tell you.
 
Last edited:
You must log in or register to reply here.
Top Bottom