Secure Password Management

So how do you manage all of your passwords? Do you write them down on a post it note? Memorize them? Store them on your computer?

Here's a better question. How secure are your passwords? Do they contain words in a dictionary? Do they contain a mixture of numbers and letters and symbols?

Im afraid to say it, but Im willing to bet that none of you securely manage your passwords. But dont fret as I will show you how. But before that, here are some password tips.

1. Passwords should not be a word in the dictionary.


2. Passwords should use a random mixture of lowercase and uppercase letters plus numbers plus symbols. ie. Ws4d!y1d#


3. Use a password manager to manage your passwords.


4. Do not enter passwords on unsecure public computers. For example, I wouldnt dare to check my online banking balance at the library.


5. Make sure your browsers are up to date with the most recent patches and updates.


6. Dont use the same password across different accounts.


7. Do not use browsers to store your passwords.


8. Do not write down your passwords on paper.


9. Do not store passwords in a Word or text file.


10. If you memorized all of your passwords, then most likely they are not that secure.
    

Here's how I do it which was taken from this Lifehacker article using Keepass to manage my passwords and Dropbox to sync my passwords across multiple computers. Basically it goes down like this. I store all of my passwords and account info in Keepass. Keepass will not only encrypt my data, but will only open my list of passwords with a master password(in which I initially set). Therefore, I only need to memorize 1 password to unlock all of my passwords. I store my Keepass password file in a Dropbox folder. This special folder gets synced to all Dropbox folders that I install on any other computer. For example, if I add a new password to Keepass on my home computer, Dropbox will automatically detect the change and perform a sync to my other Dropbox folder on my work computer. That means not matter which computer I am currently on, I will always have my most recent passwords available to me. The only caveat is that I must have both Keepass and Dropbox installed on each computer.

The Bottom Line
You might say thats a bit troublesome and probably not worth the hassle. I agree, its a bit inconvenient. But did you know that there are bad guys out there who's full time job is to steal your information? How many of you had your identity stolen or even had credit card/banking information fall into the wrong hands?

Usually, there is an inverse relationship between security and convenience. The more you want to secure something, the more inconvenient it will be to access it. So the question is how important is your personal information to you? Are you willing to take that risk?