Too much info?

Reading time: 1 min

I’m losing my marbles.

It is entirely my own fault of course, due to the fact I’m a complete and utter tart. I sign up for the latest widget, doodah or thingymajig at the drop of a hat, and as I am, believe it or not, fairly security and safety conscious, I do try and use different passwords for them all.

Add in the number of websites that I maintain, with different logins for admin screens, blogging platforms, and FTP settings…

THEN add in online banking, email addresses and… well you get the picture. Like most people who spend a fair … ok ok… large portion of their time online, I have, quite simply, too many chuffing details to remember.

Web browsers do their best by helping to remember passwords and so on, but that’s fine until you have to reinstall or use another computer. Then you usually fall back on the password reminder system offered unless, of course, there isn’t one. Then you, ummm, I, am completely screwed.

FTP sites are the worst. Which is no small matter as I have details for about 20 or so, both my own and those I’ve worked on.

So, my dearest readers, how do you handle all this? I’ve tried Keypass, text files, even an Access database back in the day. None of them work. Ideally I need something that is either portable, or encrypted so I can host it on a web server somewhere. Risky? yes I guess so but that’s an argument of ease-of-access versus security and as I’m lazy I go for ease-of-access and to hell with the consequences.. until they, you know, happen. Then, yeah, not so much.

Anyway, hints, tips, ideas, applications… help me!!!

17 comments

  1. One of my friends swears by 1Passwd which does allow you to take passwords on palms/treo’s and I’m sure iPhone too. I use Yojimbo at the moment as a dumping ground for notes, passwords which are encrypted and other stuff that needs a home.

  2. Write the information on a piece of paper, and keep that in your wallet: it’s 99% secure – definitely better than a file on a USB stick, etc.

  3. thom – yeah, I miss my Windows Mobile when it comes to stuff like this.

    Ian D – Yojimbo is OSX only yes? I’m still, largely, a Windows user.

    Mark M – yeah…. oh look, someone stole my wallet. 😉

    bitful – that’s what I do right now. OK, not really but it’s damn close!

  4. Yes, Yojimbo is for Mac. There area couple of online password managers out there but I’ve no idea how safe or secure they are. I wouldn’t trust them but then I’m paranoid.

  5. I tend to use two methods for this.

    1) For “normal” website stuff, I have about five passwords. One for sites I never plan to use again, two for sites I return to, and two for stuff that I don’t want stored using the other passwords.

    All are “secure” in that they’re a) not words per se, b) aren’t just letters and numbers, but also upper/lower case, and have punctuation in as well, c) not 733+-speek adaptations and d) words that’re only relevant to me and my history, thus not known by the majority of people anyway.

    2) For FTP stuff in particular, I tend to keep a spreadsheet with site, username, and password. That’s then encrypted and password-protected, and stored on my laptop (and thus on my backup drive) and also on a domain that’s also protected through .htaccess. (i.e. password to get to it, then still having to know what the decryption key is)

    Of course, if I forget the encryption password then I’m knackered, but as it’s one that’s significant to me without being obvious, I think it’s fairly safe to recall.

    Oh, the third step – just in case I do forget it – I have a number stored on my mobile which, when typed in again through predictive text will give me the password.

    Paranoid? Me? Yeah, probably. But it works, and I’m yet to permanently forget a password.

  6. I use the “service” recommended by Jon Udell years back – http://angel.net/~nic/passwd.html

    You remember one password and the above website (actually the javascript on that page, so it’s all local) munges it with the domain name of the site you want to log into to give a password that’s unique to both you and the site.

    You only have to remember one password; it’s portable across computers because nothing is stored anywhere (apart from your head).

    And you can get a nice bookmarklet that means logging in only requires me to click “Generate password” on my toolbar and fill in my master password, and the bookmarklet fills in any password fields on the page with the relevant password.

  7. I have 2 file boxes of index cards, filed alphabetically, kept under lock and key. One card per site/application etc.

    Works perfectly for me, and never ever fails.

    Ah, the old fashioned solutions are the best 🙂

  8. And, on the back of each card, I also write additional info: eg when I’ve changed password, or paid for a service, or dates and items I’ve ordered from particular sites (together with any relevant details about delivery speed, customer service, ‘goodwill payments’ that have been required/made etc).

    Obsessive, moi? Mais oui, but at least I don’t make the same mistake twice. If a company has been dreadful, I’ll never order from/use their services again!

    Customer service is my hobby, jsut as computing is yours…

  9. Index cards! Why didn’t I think of that. We use them extensively at work, which I’ve always found funny, a high-tech, bleeding edge IT company relying on index cards so heavily.

    The Web 2.0 part of me (god, did I just say that?) would really like a portable solution that is completely web focussed. I use Google for all my other personal stuff, and it is a system that works for me, so I’m surprised there isn’t something out there in the same vein.

  10. There is, of course, the Google Browser Sync add-on for Firefox, which does all of what you’re talking about (except for the FTP passwords, unless you do FTPing from within firefox too)

    Personally I don’t get it to save passwords – Google can know too much, IMHO – but it can do so.

  11. Write them all down on a piece of paper, but use some really basic encryption method to make it more secure (for example, replace every second letter with the next character in the alphabet). As long as you don’t use real words in your passwords, it will be uncrackable.

  12. I’ve been using SplashID for a few years now for this sort of thing.

    It’s quite flexible, allowing you to define custom fields for different types of entry and to categorise entries so that you can easily zero in on a particular class of items (e.g. showing just work-related records, or all bank account entries, or all web site logins or whatever.) It’s a commercial product, but it’s not at all expensive given that it’s a program you’ll end up using every day, and considering that you get both a desktop and a PDA version of the program for the price.

    (I’m using the PalmOS/MacOS version, but they also do a Windows Mobile/WIndows version which I’d imagine has the same functionality.)

Comments are closed.