Wondering if other people use password managers?

I've been using LastPass for the last several months and have updated all of my accounts to not use any shared passwords. I feel confident in this solution, and I also have 2 factor authentication running.

It's a little bit of extra work when signing in, but well worth the additional security.


Sent from my iPad using WAYALIFE mobile app
 

chitown35

LOSER
Actually not true. Computer systems don't store your password in plain text specifically for this reason. The software "hashes" the password using an algorithm and then stores that. Each time you log in, it hashes what you typed in and compares it to the hashed version stored in the database. It's a one way hash so there's no way to reverse the original password back out. So if you look in Eddie's database, you won't see plain text passwords ("password1", "Eddie4Life", etc) but their hashed equivalents ("jsj73hsv9&#u", "72+#jsieb$u$j2", etc)

°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°
http://wayalife.com/showthread.php?p=621404
Everything depends on how you code your application :) But yes in general (good practices) you are correct. I'm sure most sites only use top notch stuff.

Sent from my galaxy s5 but it would've been quicker to drive my jeep there and tell you.
 
Last edited:

sc_rhino

Member
Actually not true. Computer systems don't store your password in plain text specifically for this reason. The software "hashes" the password using an algorithm and then stores that. Each time you log in, it hashes what you typed in and compares it to the hashed version stored in the database. It's a one way hash so there's no way to reverse the original password back out. So if you look in Eddie's database, you won't see plain text passwords ("password1", "Eddie4Life", etc) but their hashed equivalents ("jsj73hsv9&#u", "72+#jsieb$u$j2", etc)

°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°
http://wayalife.com/showthread.php?p=621404

This is good but with all of these websites getting hacked, it's just a matter of time before they brute force them. That's why I use a different password for every website no matter how "low level" it may seem. Even yahoo got hacked over two years ago and only told everyone a couple months ago.


Liston
Instagram: black_rhino_jk
 

GraniteCrystal

New member
This is good but with all of these websites getting hacked, it's just a matter of time before they brute force them. That's why I use a different password for every website no matter how "low level" it may seem. Even yahoo got hacked over two years ago and only told everyone a couple months ago.


Liston
Instagram: black_rhino_jk
There's a difference between getting hacked and exposing data though. You can get hacked, but if the passwords are properly salted (maybe even peppered) and then hashed, they're useless to the hackers.

°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°
http://wayalife.com/showthread.php?p=621404
 

chitown35

LOSER
There's a difference between getting hacked and exposing data though. You can get hacked, but if the passwords are properly salted (maybe even peppered) and then hashed, they're useless to the hackers.

°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°
http://wayalife.com/showthread.php?p=621404

Eh, that's what they use rainbow tables for.

Edit: Meant to say multiple iterations of. But in general yeah. Computing power and space is always pushing current design limits though.

There are a few hacks that must've had million dollar budgets and inside info based on what took place (a certain anti-Iranian virus comes to mind) but I don't think any real person has to worry about this.

Edit 2: Actually if the application can be compromised it's probably better to quietly take over the application and use that to collect new user passwords.

Sent from my galaxy s5 but it would've been quicker to drive my jeep there and tell you.
 
Last edited:
Top Bottom