Lou: How to manage passwords

With the "Csdn Cup my favorite csdn password selection" Activity gradually ended, the activity selected the programmer's favorite password mm first three for Yan (Yan), Mei (Mei), Jing (static), the most commonly used password is "123456789".

In the CSDN website more than 6 million user data leaks, Renren, multiplayer, mop, 7k7k, 178 and other user passwords are also leaked, while the figure was alipay.com20100908.sql, suspected payment treasure number of the database is also impressively in the column. Online are scrambling to download packaged account information for your use of security, reminding friends to immediately login to modify the password.

(Internet use of the same account password consequences)

So, how do you manage passwords?

1. The network services that you use daily are divided into two categories: important and general.

2. Use at least 2 mailboxes to bind or request a network service, and ensure that the mailbox password is not reused.

3. Important services are applied in important mailboxes, and general services are applied in secondary mailboxes. They are never mixed. Such as important: QQ, Gmail, Sina Weibo, Taobao, Alipay; General: XX Forum, XX community

4. Key services use the same password, and can not be the same as the mailbox, as far as possible do not repeat the use of key services password, and regularly replaced. If you can't remember your brain, you can remember it in a notebook that you can touch.

5. Unimportant network server does not matter, forgot to use the unimportant mailbox to retrieve, or simply new registration.

Recommended several password management tools

Here Lou recommended two password management tools: LastPass, KeePass.

The LastPass of the Clouds

LastPass is an online Password manager and page filter, using a cryptographic encryption algorithm (256-bit AES key) to ensure that you do not get your information on the computer, your password will be encrypted stored in the cloud, and can be used on the PC side, Mac and mobile devices.

LastPass mainly in the form of browser Plug-ins, Ie,firefox, Opera, Google browser, Safari browser, Iphone,opera mini basic support.

LastPass Official homepage: https://lastpass.com

Local KeePass.

KeePass is a well-known local password security management software that can help you manage more and more passwords in the case of encryption. The tool itself has a very strong encryption characteristics, you can only remember a group of master password to manage the password.

KeePass don't keep passwords in the clouds like LastPass, so it's unlikely that they'll leak on the internet.

KeePass Official homepage: http://keepass.info/

Small tips:

To some unimportant network service password, for example each forum account, the microblog password and so on, the best is the website uses the different password, then uses the LastPass or the KeePass to remember, such words, even if the next big station is hacked, also does not need to worry about the password question, You just have to remember that LastPass or KeePass's password is enough. And they all have the password display function, do not have to worry about forgets the password.

But important websites, such as QQ, pay treasure, Taobao, net silver with brain remember good.

Some of my thoughts

Forced to modify the password of many websites. In this sense of security, but also to engage in real-name system? If this happens, it will become a personal privacy disaster.

CSDN database is a small, but if because this incident led to QQ, Alipay, net silver password stolen, who will be responsible for users?

Answer: The wind is drifting.

        Author: Lou   article address: http://lusongsong.com/reed/410.html