Question LastPass Users - Post Your Security Challenge Score

[Oxygen]

 

[BIgD1]

I really like and use LastPass. The recent feature that automatically logs you in, and changes the password for a lot of websites is very nice. Hopefully, they will be able to que all the websites you want changed, and do it all in one fell swoop. As it is now, it's one at a time automatically, but that is still a lot faster than doing it myself one by one.

 

[Ink]

Hello @BIgD1 . I've seen the Change Password for Sites, but haven't used it. Is it easy and simple to use? How does it work for the sites you've used it on?

 

[BIgD1]

Hello @BIgD1 . I've seen the Change Password for Sites, but haven't used it. Is it easy and simple to use? How does it work for the sites you've used it on?

Yes the new automatic change password feature was very easy to use. I changed passwords automatically for Paypal, Ebay, Home Depot, and Amazon for example with no problems at all. The only one that it did not work on was NewEgg, and NewEgg is in the supported list. Don't know why it did not work with NewEgg, but it could be cookie related.

Just looked over the ones that I mentioned I changed automatically, and they all were changed to passwords with 15 characters.

 

[Welldone]

Spoiler: My LastPass Score and Rank

 

[BoraMurdar]

Spoiler: My LastPass Score and Rank

I ask myself, what would be if someone would have identical number of sites stored in the Vault, with the same average password length.
Who would be the first? That one with more sites stored? It's not that impossible with so many of LastPass users...

 

[Welldone]

I ask myself, what would be if someone would have identical number of sites stored in the Vault, with the same average password length.
Who would be the first? That one with more sites stored? It's not that impossible with so many of LastPass users...

Yes,i think so the one with more sites stored in LastPass If all are equal,may be the one who has the oldest LP Account would come first

I found the following trick useful especially for banking sites in my LP Account.

Hacker tournaments start by testing hackers ability to compromise from remote, then progress into more direct hacking with access to the machine physically. Personally I do not have sharing of any kind activated on any password managers. But again my 'decoration' mode would defeat that because you are sharing a password without the decorations, hence useless.

You share Skype PW with Joe-Bob, which is; 4oAecs0:K1%PT"6@~~'O Knowing that is useless, as my cipher/decoration for that 'type' and 'link' is; 4oAecs0:K1%PT"6@~~'O!kype92JoT

The MANUAL salt is !kype92JoT which is based off of an undocumented, personal algorithmic method. Which is why we used this method at a defense contractor I worked for, and I believe it's a method to ensure ultimate security against all known NON-Keylogger/NON-MTM types of assaults. If someone has keyloggered you, not much you can do anyway. Atkinson was hacked with state sponsored malware, and it achieved access to her system through her clicking a file sent through email. Ultimately there isn't much you can do if you 'click' stuff randomly. Ultimately it will be revealed that Atkinson wasn't very intelligent in her use of security, passwords, and encryption.

So use a password manager, then develop your own salting/decoration method, and give yourself 'quantitative' security improvements for no cost, and little hassle. I could post my entire Lastpass database as a text file here, and it's going to do you no good unless you can brute force a 10 mixed character decoration appended to each one.

So let's all use this method, and not fuss with arguing if this or that is secure, make them all secure

Source and Credits: Post #107 by Mayahana

 

[scot]

If we can remember all the passwords, then there is no need to have a password manager.I tried a bit too hard not to have a password manager but at last has to convince myself and opted for LastPass.

 

[tallorder]

Darn, this might have been a good place for me to see a link, to go to LastPass, but I can look it up!

 

[cruelsister]

If only Banks and Retailers would be as concerned as we are in keeping our data secure life would be good.

 

[marzametal]

85% Your Score
73,261st Your Rank
100% - Perfect! LastPass Master Password Strength

 

[Vasudev]

45%
Your Score

572,414th
Your Rank

96% - Very Strong

LastPass Master Password Strength

 

[Ink]

My scores from LastPass web and LastPass Premium app are different.

Except, master password remains at 100%.

 

[tallorder]

Results are: 74%, 210,434th, 100% prefect!

 

[Ashu Kumar]

In my opinion, KeePass is the best software in this category. Works like a charm with Firefox, intelligibly integrated and most importantly, it is not slowing down the Firefox.

Though I couldn't get it to work seamlessly with Internet Explorer but "Perform Auto -Type" feature of KeePass is outstanding and works with any browser.

A minor downside is small font of the entries in program but with latest update v2.28, it is improving itself with some UI enhancements.

 

[FreddyFreeloader]

All my financials and e-mail passwords score 100%.

 

[FreddyFreeloader]

I have never used a password manager nor do I see the need for it.

Like OneDay I too do not trust a password manager.

How I remember / store my passwords is for me alone to know, I am not telling

I keep my car keys & my house keys on my person. I do not have some one to hold them for me.

Why will I want a password manager to hold my passwords for me ?

Having to type those passwords is leaving them open for keyloggers to steal.

 

[Post-it]

I too have quite a few logins with different password for all logins.
I too have complicated passwords & I too can not possibly remember them in my mind.
I will never ever write my passwords on paper.
But there are also other digital ways of remembering & storing passwords.
I like bare minimum programs installed on my computer which is why I do not want a password manager.

With exponential use of internet and in order to stay protected against identity theft and accounts highjacking
I need to have a strong and unique password for each of the sites I registered.
After deleting all the obsolete ones I still have 212 sites to manage a strong password for. Simply impossible to "remember" 212 passwords with 20-digits length.

Not having to key them in on the keyboard also protects me from priying eyes or keyloggers
Having a password manager also makes life easy when one needs to change passwords for regular updates or when some of my sites have or may have been hacked

I also use the 2-factor-authentication with a Ubikey if ever need to log from someone else's machine

I also disabled and purged all password storage within the web browsers, they simply are not safe at all, far too easy to steal.
When I first installed LastPass, without asking for my permission, I saw the programm collecting all the passwords I had stored in my browsers!!!! For me, that was a wake-up call

 

[Tony Cole]

Mine is 96% using 101 character password and two set authentication app Toopher

 

[Post-it]

My LastPass Security Challenge score: 212 sites
5 of them simply do not allow strong password but those are not at all critical and I am fine with them.
Nevertheless it affects the overall score