Want to make a password lists: What's the most secure way? Can Excel provide enough encryption?

[ndee]

Is the encryption strong enough? Cuz I always forget those stupid passwords.

Thanks

 

[Zee]

keep it on a floppy

 

[pulse8]

I just use my brain.

 

[guapo337]

passwords for AIM, ATOT, etc?

why do you need encryption and whatnot?

i just remember 'em.


or use the same damn password

 

[Mr.IncrediblyBored]

Or just write them down on paper.

 

[Feanor727]

Is excel's encryption strong enough for a list of your passwords? I don't know... e-mail me the file and then check your bank balances in a week :evil:

 

[dullard]

Simplify your life if you can. Use the same password for many similar uses. Of course, don't go all out and use just one password (as that can be easilly found out and then you are screwed). But have one password for each security level. Here is what I do:
1) One password to log into each computer,
2) One password to log into each non-critical website (such as mulitple forums or gaming sites),
3) One password for my really important files, and
4) One password for my bank accounts.
This way if someone breaks one password - they still do not know any of the rest. But I only have 4 passwords to memorize which is very easy to keep track of.

 

[AmigaMan]

I usually keep my passwords in a text file that I then PGP encrypt. If anyone knew my master password and were able to get onto my machine, then I'd have a problem. Fortunately my master password is non-dictionary based, has upper and lower case letters, and numbers in it. It's also changed slightly once every six months.

 

[hevnsnt]

AAbbCCddEEzzXX1144?

 

[Keego]

You'd get better answers if you posted in the software forum!

 

[dman]

I use bestcrypt* (not free) to create a storage container and then I put my files in there. I suppose someone could crack* my password, but, I'd be more concerned that they have my PC not that they can get access to ATOT and post as me.


Astalavista.

 

[xospec1alk]

if you use windows encryption it should be fine. just have to remember to logout of your system and what not.

 

[ndee]

ok, I forgot, it's for our company, every password of every user(email in special), when he forgets it, cuz we have our email thingie outsourced(don't ask me why) and it's always a hassle to reset a password etc. Or when I'm not around, my deputy also needs some passwords. We also have like 25 different webpages, which also makes it difficult

 

[rudeguy]

sometimes you cant just use one password...I know the last job I had I had 5 DIFFERENT log ons, and each had to have a different password....and you couldnt recycle passwords....ndee my solution was to send myself an email with those passwords on it once a month (thats when we had to update it)...as far as excel, I am not sure about the encryption

 

[ndee]

Originally posted by: rudeguy
sometimes you cant just use one password...I know the last job I had I had 5 DIFFERENT log ons, and each had to have a different password....and you couldnt recycle passwords....ndee my solution was to send myself an email with those passwords on it once a month (thats when we had to update it)...as far as excel, I am not sure about the encryption

about the same scenario here. Thanks for your input.

 

[Looney]

ewallet

 

[iamwiz82]

i make a secured directory with me having the only rights, then i encrypt it, then i use excel's crappy PW protection.

 

[Mr N8]

Originally posted by: AmigaMan
I usually keep my passwords in a text file that I then PGP encrypt. If anyone knew my master password and were able to get onto my machine, then I'd have a problem. Fortunately my master password is non-dictionary based, has upper and lower case letters, and numbers in it. It's also changed slightly once every six months.

With the info you have given here, you have eliminated about 70% of the work needed to crack a password. Honestly, I would never give out any information on how my passwords are formatted, because it just makes it easier to break them.

 

[MaxDSP]

ndee, try out a program called Password Agent. It allows you to make folders for different types of passwords. The free version, Password Agent Lite, allows up to 25 entries per file (you can create as many files as you want). Try it out, Ive been using it for around 2 years now.

EDIT: "Strong U.S. government approved Rijndael encryption (256-bit key). "

Don't know how relatively strong that is, but seems good enough...

 

[NogginBoink]

Originally posted by: ndee
ok, I forgot, it's for our company, every password of every user(email in special), when he forgets it, cuz we have our email thingie outsourced(don't ask me why) and it's always a hassle to reset a password etc. Or when I'm not around, my deputy also needs some passwords. We also have like 25 different webpages, which also makes it difficult

Excel encryption is just slightly better than no encryption.

Use NTFS encryption on W2K or Win XP. EFS is essentially uncrackable.

 

[teddymines]

Any password can be cracked by either dictionary or brute force. Leet gives you better odds at holding off a dictionary attack, and length greater than about 8 characters will put brute force in the trillions of years range.

Some password schemes (e.g., pkzip) are notorously weak, and crackers exist for them. Excel is pretty solid, IIRC.