Password protection

As a (web) developer, I don't trust cloud storage of credentials, so I swear by KeePass. I got my password file on my PC and have it sync secondary using dropbox (or any other storage really) to other devices like laptop and phone.

To lock your password file, use combination of 1 master password you will remember + a key file. And as a key file, use something inconspicuous like a (actual working) mp3 file or a photo and never ever ever make that key file available in the cloud. Manually put it on all your devices via usb / whatever.
So if some one gets a hand of your password file, they cannot bruteforce the password because they don't have the key file. And if they gain access to your device, will have to figure out which of the many files on your device it is.

Have been using Dashlane on all my devices, and the kids devices. Has served me well. Keeps unique passwords for anything. Dashlane syncs between all devices, no need for Dropbox which aside, I believe is the worst choice for cloud storage, unless you pay a subscription perhaps. My company has banned using Dropbox for security reasons also for private use.

-SD-Silicon wrote: Dropbox which aside, I believe is the worst choice for cloud storage.

It is indeed horribe. And it doesn't matter since the file put on there is encrypted up the wazoo and cannot be opened without a piece of file that you never put on the internet (and a password).

Use an offline password vault like 1Password or Keepass. Don't install the browser extensions. Use a solid "master password".

I'm using Bitwarden which I host on an own server. I'm happy with it and it's open source.

nice, whats your password?

-SD-MxJames wrote: nice, whats your password?

How did you know?