Simple Password saving policy-KeePass

Simple Password saving policy-KeePass

Two QQ friends have been stolen this year. What I'm talking about here directly affects me. At present, most of the stolen items are called payment. Generally, I will not make payment if I have no problem with IQ. However, from another perspective, why is your QQ password so vulnerable. Have you ever wondered whether your password is correct. If the password is the same as other accounts, it is very likely that the password has been disclosed. Through this credential stuffing method, they have successfully opened various accounts of many people.

You can search 54 social engineering databases on the Internet. This website shows you the password you used.

The following describes a simple password protection method:

There are several tools on the earth to help you manage passwords. I just want to talk about them here. The first one is 1 password (1 p), which is also the most convenient one. Powerful, almost nothing bad. The encrypted file is saved locally, so your password will not be uploaded. Try not to use a cracked version, that is, it actually requires money to buy. The price is a little expensive. You can buy the mac and win platforms at around $70. If you do not like to spend money, you can use lasspass and keepass. The former is encrypted and uploaded to the network. Most people do not use it. I have also used it, A tool that is difficult to use. It seems like 1 p is a scum, and you can only choose keepass for the rest.

Next, let's talk about keepass. What is its advantage? It is open-source, so cross-platform and mobile terminals are advantages. But one bad thing is that it does not enable automatic password filling like 1 Password. In fact, I have a deep understanding and it is too convenient. It may be a vulnerability. A vulnerability is also a type of negligence. In fact, any software may be used. Compared with 1 P, keepass only lacks the browser filling function. Because I was going to buy 1 p. Money is always not enough, so use free. After switching from 1 P, I did not find it difficult to use. This is also the purpose of writing this article. Let's talk about how to use this software.

Create a new database with the same master password as 1 p. It is used to open your database with various passwords. I recommend that you use the key, which is the key you know. If the password is missing, it cannot be opened. This involves the key storage, and there are many methods. You can put it in another directory or folder and disguise it as another name, such as LICENSE, which is available in most software. It can also be disguised as README, which is also available in most software. In short, you can just hide it. A master password + key. Your password is safe enough, even if the password database is taken by others, it is useless.

Finally, let's talk about password sharing. passwords cannot be shared with others. 1 p seems to have this function, but here I am talking about sharing only to myself. If you have mac, windows, mobile phones, and other devices, you can easily get all the passwords by using a database. Because keepass is open-source, Macpass can be used on mac, while keepass2 can be used in windows. I have not tried it on the mobile end. It should be a lot of implementations.