You're not giving your full password to keypass/lastpass, just a portion of it. But if you have an objection to putting them all in one place, this is a mental crutch for overcoming it. I tend to think keypass itself is good enough for me (plenty of other people to hack who are using their kids names, pets name, etc as passwords).

In reality, since you're using a password program, it would be a random password, followed by your personal extension of it.ģ. And if they can steal the hash but not decrypt it, they will not have any hints on what the password might be.Ģ. So when yours doesn't work, they will move on to another easier password. Hypothetically, if they can crack keypass/lastpass, they will have plenty of options. And if they can crack keypass or lastpass, they wouldn't be fooled by a simple trick like that.ġ. Most crackers would try different variations of your old passwords, since that is what most people do when forced to change passwords. I don't see the value of that other than keeping a casual person from using your password that is stored in plain text. Tyrion wrote:Here's an idea- Use keypass/lastpass to store the majority of your password, but leave something extra for you to complete each time. And LastPass doesn't know you master password, so even if someone broke into LastPass's server and stole your database, they still don't have the master password to decrypt your database. By you do need to make sure you have backups of your KeePass database and preferably at least one backup outside of you home.Īnd for companies such as LastPass that do store your passwords on their servers, the password database is encrypted using your master password before they are sent to LastPass's servers. It isn't a company, it's just a program and your password won't be stored on a server unless you put it there.

If you aren't comfortable storing your passwords on someone else's server you could look at KeePass. Is it conceivable that such a password management company could be compromised and then a hacker knows EVERY password? Can't seem to grasp how the security would be better with a password manager than with say, Target. Jerrybaby wrote:I've been reading these threads and can't pull the trigger so to speak on a password manager.

Usb stick password manager