1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

How do you guys go about saving all your login & passwords

Discussion in 'BlackHat Lounge' started by MP123, May 7, 2014.

  1. MP123

    MP123 Junior Member

    Joined:
    Nov 12, 2011
    Messages:
    163
    Likes Received:
    307
    Occupation:
    Go Play somewhere else, I'm busy!
    Location:
    Google it!!
    Just wondering how do you guys store you login details for all your websites, emails, social media, etc.

    I have it all in .csv but I feel there has to be a better way of some sort.

    any advise?
     
  2. IAmNotLegend

    IAmNotLegend Regular Member

    Joined:
    Mar 13, 2014
    Messages:
    340
    Likes Received:
    285
    I use a separate browser for all my IM work and other confidential sites. And store the password in it.
     
  3. Asif WILSON Khan

    Asif WILSON Khan Executive VIP Premium Member

    Joined:
    Nov 10, 2012
    Messages:
    10,112
    Likes Received:
    28,530
    Gender:
    Male
    Occupation:
    Fun Lovin' Criminal
    Location:
    London
    Home Page:
    • Thanks Thanks x 1
  4. royserpa

    royserpa Jr. VIP Jr. VIP Premium Member

    Joined:
    Sep 28, 2011
    Messages:
    4,641
    Likes Received:
    3,491
    Gender:
    Male
    Occupation:
    Negative Options aka Rebills!
    Location:
    Royserpa
    Home Page:
    All my log ins and passwords are in my head, that's the safest way to keep the info ;)
     
    • Thanks Thanks x 5
  5. IAmNotLegend

    IAmNotLegend Regular Member

    Joined:
    Mar 13, 2014
    Messages:
    340
    Likes Received:
    285
    There is a risk that the owner of this can access all our accounts. But that applies too all the softwares, browsers we use.
     
  6. Asif WILSON Khan

    Asif WILSON Khan Executive VIP Premium Member

    Joined:
    Nov 10, 2012
    Messages:
    10,112
    Likes Received:
    28,530
    Gender:
    Male
    Occupation:
    Fun Lovin' Criminal
    Location:
    London
    Home Page:
    The encryption and decryption is done locally so it should be safe.

    https://lastpass.com/how-it-works/
     
    • Thanks Thanks x 2
  7. WizGizmo

    WizGizmo Super Moderator Staff Member Premium Member

    Joined:
    Mar 28, 2008
    Messages:
    3,833
    Likes Received:
    55,431
    I use a paid version of Roboform. Been using it for the last 6 years
    and couldn't live without it now. It makes life so much easier for me. :)
     
    • Thanks Thanks x 4
  8. umerjutt00

    umerjutt00 Jr. VIP Jr. VIP Premium Member

    Joined:
    Oct 28, 2011
    Messages:
    3,644
    Likes Received:
    1,904
    Occupation:
    Ninja
    A text file. :) But only do it if you are the only one who access the PC/laptop. I also backup the text files having all of records on USB, external hard-disk every 1 week.
     
  9. Asif WILSON Khan

    Asif WILSON Khan Executive VIP Premium Member

    Joined:
    Nov 10, 2012
    Messages:
    10,112
    Likes Received:
    28,530
    Gender:
    Male
    Occupation:
    Fun Lovin' Criminal
    Location:
    London
    Home Page:
  10. IAmNotLegend

    IAmNotLegend Regular Member

    Joined:
    Mar 13, 2014
    Messages:
    340
    Likes Received:
    285
    • Thanks Thanks x 3
  11. Ninya

    Ninya Regular Member

    Joined:
    Jan 22, 2012
    Messages:
    219
    Likes Received:
    113
    Occupation:
    Programmer
    Location:
    Sydney, Australia
    I suggest LastPass. I use it at home and we also used it at the software dev company I worked at.
    It's much more secure to hold the encrypted data over LastPass than it is to keep it on your computer. Actually, people were close to getting fired if they didn't have an encryption software like LastPass.
    I definitely condone it. As long as you don't give your master pass away (Why would you) then you'll be fine. This is bank-grade technology guys, it's much safer than your home computer. Trust me.

    Edit: It also makes your life so, so much easier.

    These companies make millions through their technology and USB-pass sticks. They're not going to steal some IM's account details to an affiliate account with 0.52 earnings. They need to go through certain certifications in order to store this information. Basically they're fucked if they did anything to compromise your security.
     
    Last edited: May 7, 2014
  12. Asif WILSON Khan

    Asif WILSON Khan Executive VIP Premium Member

    Joined:
    Nov 10, 2012
    Messages:
    10,112
    Likes Received:
    28,530
    Gender:
    Male
    Occupation:
    Fun Lovin' Criminal
    Location:
    London
    Home Page:

    Do you understand what encrypted data means?
     
    • Thanks Thanks x 1
  13. Stizerg

    Stizerg Power Member

    Joined:
    Oct 23, 2011
    Messages:
    611
    Likes Received:
    167
    LastPass, except a few important passwords e.g. banking, ebay, paypal etc.

    Encrypted data sent to server for storage and can be retrieved and decrypted locally on any device using master password.
     
  14. Aty

    Aty Jr. VIP Jr. VIP

    Joined:
    Jan 27, 2011
    Messages:
    5,397
    Likes Received:
    3,691
    Home Page:
  15. IAmNotLegend

    IAmNotLegend Regular Member

    Joined:
    Mar 13, 2014
    Messages:
    340
    Likes Received:
    285
    A data which is sent over internet is crackable. No offence but these softwares are not good for storing banking or paypal like site's password. You might already know it. :)

    No hard feelings. OP wanted to know how we store password, let not the thread go off topic.
     
  16. Asif WILSON Khan

    Asif WILSON Khan Executive VIP Premium Member

    Joined:
    Nov 10, 2012
    Messages:
    10,112
    Likes Received:
    28,530
    Gender:
    Male
    Occupation:
    Fun Lovin' Criminal
    Location:
    London
    Home Page:

    No hard feelings and no offence is taken but the data sent is encrypted with AES 256-bit encryption with routinely-increased PBKDF2 iterations. So it is pretty strong.
     
    • Thanks Thanks x 3
  17. spmcnerd

    spmcnerd Regular Member

    Joined:
    Dec 20, 2010
    Messages:
    309
    Likes Received:
    106
    LastPass her. Fills forms and makes paying bills a cinch. Some of my passes are 15 long all characters.Good Luck
     
  18. maxximus

    maxximus Newbie

    Joined:
    Oct 12, 2013
    Messages:
    16
    Likes Received:
    0
    this may be a tad bit caveman like ... but I just make an excel speadsheet with all my logins.. works and easy to search though .. and just passwords protect the folder with your logins in it you will be golden
    '
     
  19. positivcriss

    positivcriss Power Member

    Joined:
    Mar 30, 2010
    Messages:
    680
    Likes Received:
    328
    Occupation:
    Photoshop
    Location:
    Black Hat World
  20. limitbreakers

    limitbreakers Junior Member

    Joined:
    Sep 14, 2012
    Messages:
    163
    Likes Received:
    51
    Occupation:
    Student
    Location:
    BHW
    I just store it in csv.

    The most important ones, I just write them in a notebook (the real one :cool:) I kept for these purposes. I feel it's the safest. No one's coming down to my place to steal it.

    BTW, Am I the only one doing this? At least, from the above replies, I feel so.