Quote from: Eadeqa on June 02, 2014, 04:47:43 AM

Quote from: jkoil on June 01, 2014, 09:39:21 PM

Passwords, lost, stolen, ... the same "old" subjects

place.)

I have never "lost" a password or ever being hacked and I have been around for years. Lastpass is perfectly safe as encryption is done locally on computer. Don't do stupid things like click on executable downloadable from untrusted sources. For extra paranoids, I also recommend something like https://www.malwarebytes.org/

Quote

I still skip password generators and password managers

When being skeptic enough, nothing in the computer is in safe. At least a copy of the password must be written in paper/wood/rock/younameit in safe place.)

If that makes you happy, be my guest, but that is not good advice. Most humans will never generate more random password than cryptographically secure random generator. Plus for vast majority of people password managers are much safers for several reasons

(1) Users can use unique passwords for each site (very important security step) without having to memorize hundreds of unique passwords. I have over 350 passwords.
(2) The encryption key is derived by key stretching of master password (thousands of SHA256 operations) so even if in unlikely scenario vault file is stolen, brute force attack would still be very difficult.
(3) The user can enable two factor authentication for extra security
(4) Most password managers have have some protection against keyloggers (auto fills, two factor authentication, online keypad, one time passwords, etc).
(5) It's easy to backup passwords securely -- losing passwords due to hard drive crash is just bad as getting them stolen.

The bottom line: Even if a user has very weak master password for password manager, it's highly likely he will still never get hacked. Weak password for Nxt itself means getting hacked immediately 100%

Clip on lastpass security: https://www.youtube.com/watch?v=_stBixODWf8

"350" ...

well, then we play password games in different leagues

I have 8 main accounts (2 banks, 4 emails, 2 other) and those I remember. In addition there are the cryptocurrency accounts, whose passwords I do not remember, not always.)
Those usernames and passwords are in at least 2 safe places, not meaning digital stores.

Other different accounts, ~ 20, are not so important.
All the passwords, which can be in the computer are encrypted by my own, super-secure, methods

and after every backup they are also in backup devices.
In addition, ofc, there are 50+ accounts, which are even less important, some web sites are maybe used only once, twice. They just "are". Maybe they would be appropriate accounts for those pw managers - but not those bank and other important accounts.

"Most humans will never" ... but they also belong to that category, where is made those warned clicks...