Differences

This shows you the differences between two versions of the page.

--- security_topics [2021.02.02 06:08] – Steve Isenberg
+++ security_topics [2021.02.02 06:23] – Steve Isenberg
@@ Line 1: / Line 1: @@
 This is a work-in-progress.  If you have suggestions on what to cover (and/or what not to discuss) please let Steve know.\\
 This page last modified ~~LASTMOD~~
+====Summary or How I Secure and Use Secure Passwords====
+For what it's worth, I use KeePass and on multiple devices.  I will summarize below.  Note, there are no costs (to purchase or recurring) for any of the following (further down on the page some items may have a cost and it is noted).  //These are my practices and I'm only putting them here for readers to consider when setting up their database security system. You should do what you feel is best for you.//
+  - KeePass refers to both (a) an encrypted database holding information and (b) the name of one application that can access the database.
+  - A KeePass //database// can hold
+    - Logins and password
+    - Other information you feel useful, such as: Social Security numbers, Secret passwords (answer to "what was your first dog's name"), telephone numbers
+    - Past passwords.  Date you started to use a given password.
+  - There are many applications that can access a KeePass database.  You choose one that is available and that you find works for you.
+    - On my iPhone, I use or have used: KeePass Touch, KeePassium, MiniKeePass
+    - On Windows (a while ago) I was using KeePass2
+    - On Mac OS X I'm using KeePassXC
+  - When I first started using KeePass, I would keep the database on a USB stick and copy it to/from any computer I was using to access/modify the database.  The risk of course is that the database might differ on different machines or that I might misplace the USB stick.
+  - Then I started using Dropbox to hold the database.  This way I could access the KeePass database from any machine or phone that could access Dropbox.
+  - Then Dropbox started restricting free use to 3 devices.  Then I switched to storing it on iCloud, and periodically copy it from iCloud to: Dropbox, pCloud, and into Documents directory on the machine I'm using.
+  - I have an entry in KeePass with a name I modify that indicates the last important change I've made to the database.
+    - For example: "Last Changed 2021 0202.1003" so I know the last change was Feb 2, 2021 at 3 minutes after 10.
+    - This way I can see how current a database is on the other devices and determine whether I need to update it on that device.
+  - I use the KeePass application to create new entries and especially passwords for logins.  My passwords are typically 14 characters or longer and the KeePass application considers them secure.
+    - Here is a possible password I might use (and it's one I am not using): cqLbq2NHcuNmgU -- 14 characters, upper and lower case letters, and at least one number.  This one has entropy 82.06 which is "good".
+    - This one: M6dehfJRn7dz7lM82K has entropy 101.60 and is considered "excellent".
+    - Using a password manager you can create quite long passwords
+    - Using a password manager you can create secure passwords and not have to remember all of them
 ====Care and Maintenance of Secure Passwords====