<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">Derek: Good questions to ask and it’s all a balance. I have over 1000 passwords across sites I’ve visited over the years so writing them down is really not an option. Using a password manager means I can have very long complex passwords that are never shared across sites.<div><br></div><div>Password managers can be risky. There was a well-publicized breach at LastPass a couple of years ago. But I think they can be mitigated by looking at the technology used and how the company presents and audits its security policies. LastPass was quite well-known before the breach to have problems which they ignored. </div><div><br></div><div>I first came across Dashlane in 2012 when I was CIO for a large bank - back then they were pretty new and were focused more on form filling than password management, but we were happy with their security practices and I started using them peronsally (because of that history I have a permanent feee plan, which might bias me :)) But you can look at Dashlane (or any other vendor’s website) to see their policies and approach. </div><div><br></div><div>If you’re into self-hosting, you can also run your own password manager (VaultWarden is the gold standard) ensuring no provider is storing that data. But availability and resiliency is now your responsibility, so choose wisely. </div><div><br></div><div>However you manage passwords, you should also use 2FA wherever possible and/or passkeys which are becoming a bit more prevalent. I use Authy as a single app for generating 2FA codes, and hardware tokens (like Yubico or Titan) for my most sensitive accounts: Google, Apple etc since email is often the vector to reset passwords.</div><div><br></div><div> George: Dashlane does allow you to import data from an appropriately formatted spreadsheet or some other password managers.</div><div><br></div><div><br></div><div><div><br></div><div><br><div><br></div><div><br id="lineBreakAtBeginningOfMessage"><div><br><blockquote type="cite"><div>On Feb 3, 2024, at 09:31, Stan Rose via LCTG <lctg@lists.toku.us> wrote:</div><br class="Apple-interchange-newline"><div><div dir="auto">I guess I'm the odd man out here. I've been using a different password manager for about 15 years, Roboform. I use it on my PC, iPad and Galaxy phone and have never had a problem with it. It integrates with Chrome, Edge, Safari as well as several local apps including Quicken.</div><div dir="auto"><br></div><div dir="auto">It's also cheaper than some of the others at about $20 per year.<br clear="all"><br clear="all"><div dir="auto"><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature">Stan<br><br><a href="mailto:stan_rose@alum.mit.edu">stan_rose@alum.mit.edu</a></div></div></div><div><br></div><div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sat, Feb 3, 2024 at 6:38 AM Derek Gardiner via LCTG <<a href="mailto:lctg@lists.toku.us">lctg@lists.toku.us</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="auto">Perhaps I am old fashioned but I am amazed at the trust you all feel for the safety of your online password managers. Data breaches are a common thing these days, regrettably. <div>I have considered moving to one of these password managers several times over the years but always go back to a sheet of paper with my passwords coded by myself.</div><div>Just my thoughts,</div><div>Derek Gardiner.<br><br><div dir="ltr">Sent from my iPad</div><div dir="ltr"><br><blockquote type="cite">On Feb 2, 2024, at 11:22 PM, George Gamota via LCTG <<a href="mailto:lctg@lists.toku.us" target="_blank">lctg@lists.toku.us</a>> wrote:<br><br></blockquote></div><blockquote type="cite"><div dir="ltr"><div><p class="MsoNormal"><span style="font-size:12.0pt;color:#1f497d">Thank for your input, now comes the hard question.<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:12.0pt;color:#1f497d">How do you (set up) input your data?<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:12.0pt;color:#1f497d">I have all my data on an excel sheet. Do I have to add each entry by “hand”, and if the associated password is inadequate, go to the web site, and change it there? Is there auto synching between websites and Dashline? <u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:12.0pt;color:#1f497d">It might be useful at one of our potpourri sessions spend a few minutes, going through each step in organizing Dashline.<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:12.0pt;color:#1f497d">Thanks<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:12.0pt;color:#1f497d">George<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:18.0pt;color:#1f497d"><u></u> <u></u></span></p><div><div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0in 0in 0in"><p class="MsoNormal"><b>From:</b> Smita Desai <<a href="mailto:smitausa@gmail.com" target="_blank">smitausa@gmail.com</a>> <br><b>Sent:</b> Friday, February 2, 2024 10:44 PM<br><b>To:</b> George Gamota <<a href="mailto:ggamota@stma-llc.com" target="_blank">ggamota@stma-llc.com</a>><br><b>Cc:</b> Lexington Address Distribution <<a href="mailto:lctg@lists.toku.us" target="_blank">lctg@lists.toku.us</a>><br><b>Subject:</b> Re: [Lex Computer & Tech Group/LCTG] Password Manager<u></u><u></u></p></div></div><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">Sorry meant that it uses master password and once you log into the addin it automatically fills in the info. On mobiles, the app uses Touch Id or passcode or of course master password.<u></u><u></u></p><div><div><p class="MsoNormal"><u></u> <u></u></p></div><div><p class="MsoNormal">Smita Desai <u></u><u></u></p></div><div><p class="MsoNormal"><u></u> <u></u></p><div><p class="MsoNormal">Sent from my iPad<u></u><u></u></p></div><div><p class="MsoNormal"><br><br><u></u><u></u></p><blockquote style="margin-top:5.0pt;margin-bottom:5.0pt"><p class="MsoNormal" style="margin-bottom:12.0pt">On Feb 2, 2024, at 10:39 PM, Smita Desai <<a href="mailto:smitausa@gmail.com" target="_blank">smitausa@gmail.com</a>> wrote:<u></u><u></u></p></blockquote></div><blockquote style="margin-top:5.0pt;margin-bottom:5.0pt"><div><p class="MsoNormal">Hi George,<u></u><u></u></p><div><p class="MsoNormal"><u></u> <u></u></p></div><div><p class="MsoNormal">I have Dashlane. I like it. It works as an add on in web browsers and an app on mobile devices. Cost is about $60 subscription annually. That allows you to share across multiple computers and mobile devices. Once you log 8n to the admin, it will automatically fill in the info. Also has a VPN in case you need it when traveling overseas.<u></u><u></u></p></div><div><p class="MsoNormal"><u></u> <u></u></p></div><div><p class="MsoNormal">Hope that helps,<u></u><u></u></p></div><div><p class="MsoNormal">Smita Desai <u></u><u></u></p></div><div><p class="MsoNormal"><u></u> <u></u></p></div><div><p class="MsoNormal"><u></u> <u></u></p><div><p class="MsoNormal">Sent from my iPad<u></u><u></u></p></div><div><p class="MsoNormal"><br><br><u></u><u></u></p><blockquote style="margin-top:5.0pt;margin-bottom:5.0pt"><p class="MsoNormal" style="margin-bottom:12.0pt">On Feb 2, 2024, at 10:06 PM, George Gamota via LCTG <<a href="mailto:lctg@lists.toku.us" target="_blank">lctg@lists.toku.us</a>> wrote:<u></u><u></u></p></blockquote></div><blockquote style="margin-top:5.0pt;margin-bottom:5.0pt"><div><p class="MsoNormal"><u></u><u></u></p><p class="MsoNormal"><span style="font-size:12.0pt">I am looking to buy a good Password Manager.</span><u></u><u></u></p><p class="MsoNormal"><span style="font-size:12.0pt">PC Magazine recommends Dashline.</span><u></u><u></u></p><p class="MsoNormal"><span style="font-size:12.0pt">Any recent experience folks want to share?</span><u></u><u></u></p><ol style="margin-top:0in" start="1" type="1"><li style="margin-left:0in"><span style="font-size:12.0pt">Security</span><u></u><u></u></li><li style="margin-left:0in"><span style="font-size:12.0pt">Easy to set up</span><u></u><u></u></li><li style="margin-left:0in"><span style="font-size:12.0pt">Ease to operate</span><u></u><u></u></li><li style="margin-left:0in"><span style="font-size:12.0pt">Inexpensive</span><u></u><u></u></li></ol><p class="MsoNormal"><span style="font-size:12.0pt">Thanks</span><u></u><u></u></p><p class="MsoNormal"><span style="font-size:12.0pt">George</span><u></u><u></u></p><p class="MsoNormal"><span style="font-size:18.0pt"> </span><u></u><u></u></p><p class="MsoNormal">===============================================<br>::The Lexington Computer and Technology Group Mailing List::<br>Reply goes to sender only; Reply All to send to list.<br>Send to the list: <a href="mailto:LCTG@lists.toku.us" target="_blank">LCTG@lists.toku.us</a> Message archives: <a href="http://lists.toku.us/pipermail/lctg-toku.us/" target="_blank">http://lists.toku.us/pipermail/lctg-toku.us/</a><br>To subscribe: email <a href="mailto:lctg-subscribe@toku.us" target="_blank">lctg-subscribe@toku.us</a> To unsubscribe: email <a href="mailto:lctg-unsubscribe@toku.us" target="_blank">lctg-unsubscribe@toku.us</a><br>Future and Past meeting information: <a href="http://lctg.toku.us/" target="_blank">http://LCTG.toku.us</a><br>List information: <a href="http://lists.toku.us/listinfo.cgi/lctg-toku.us" target="_blank">http://lists.toku.us/listinfo.cgi/lctg-toku.us</a><br>This message was sent to <a href="mailto:smitausa@gmail.com" target="_blank">smitausa@gmail.com</a>.<br>Set your list options: <a href="http://lists.toku.us/options.cgi/lctg-toku.us/smitausa@gmail.com" target="_blank">http://lists.toku.us/options.cgi/lctg-toku.us/smitausa@gmail.com</a><u></u><u></u></p></div></blockquote></div></div></blockquote></div></div></div><span>===============================================</span><br><span>::The Lexington Computer and Technology Group Mailing List::</span><br><span>Reply goes to sender only; Reply All to send to list.</span><br><span>Send to the list: <a href="mailto:LCTG@lists.toku.us" target="_blank">LCTG@lists.toku.us</a> Message archives: <a href="http://lists.toku.us/pipermail/lctg-toku.us/" target="_blank">http://lists.toku.us/pipermail/lctg-toku.us/</a></span><br><span>To subscribe: email <a href="mailto:lctg-subscribe@toku.us" target="_blank">lctg-subscribe@toku.us</a> To unsubscribe: email <a href="mailto:lctg-unsubscribe@toku.us" target="_blank">lctg-unsubscribe@toku.us</a></span><br><span>Future and Past meeting information: <a href="http://lctg.toku.us/" target="_blank">http://LCTG.toku.us</a></span><br><span>List information: <a href="http://lists.toku.us/listinfo.cgi/lctg-toku.us" target="_blank">http://lists.toku.us/listinfo.cgi/lctg-toku.us</a></span><br><span>This message was sent to <a href="mailto:derek.gardiner.02420@gmail.com" target="_blank">derek.gardiner.02420@gmail.com</a>.</span><br><span>Set your list options: <a href="http://lists.toku.us/options.cgi/lctg-toku.us/derek.gardiner.02420@gmail.com" target="_blank">http://lists.toku.us/options.cgi/lctg-toku.us/derek.gardiner.02420@gmail.com</a></span><br></div></blockquote></div></div>===============================================<br>
::The Lexington Computer and Technology Group Mailing List::<br>
Reply goes to sender only; Reply All to send to list.<br>
Send to the list: <a href="mailto:LCTG@lists.toku.us" target="_blank">LCTG@lists.toku.us</a> Message archives: <a href="http://lists.toku.us/pipermail/lctg-toku.us/" rel="noreferrer" target="_blank">http://lists.toku.us/pipermail/lctg-toku.us/</a><br>
To subscribe: email <a href="mailto:lctg-subscribe@toku.us" target="_blank">lctg-subscribe@toku.us</a> To unsubscribe: email <a href="mailto:lctg-unsubscribe@toku.us" target="_blank">lctg-unsubscribe@toku.us</a><br>
Future and Past meeting information: <a href="http://lctg.toku.us/" rel="noreferrer" target="_blank">http://LCTG.toku.us</a><br>
List information: <a href="http://lists.toku.us/listinfo.cgi/lctg-toku.us" rel="noreferrer" target="_blank">http://lists.toku.us/listinfo.cgi/lctg-toku.us</a><br>
This message was sent to <a href="mailto:rosesta@gmail.com" target="_blank">rosesta@gmail.com</a>.<br>
Set your list options: <a href="http://lists.toku.us/options.cgi/lctg-toku.us/rosesta@gmail.com" rel="noreferrer" target="_blank">http://lists.toku.us/options.cgi/lctg-toku.us/rosesta@gmail.com</a><br>
</blockquote></div></div>
===============================================<br>::The Lexington Computer and Technology Group Mailing List::<br>Reply goes to sender only; Reply All to send to list.<br>Send to the list: LCTG@lists.toku.us Message archives: http://lists.toku.us/pipermail/lctg-toku.us/<br>To subscribe: email lctg-subscribe@toku.us To unsubscribe: email lctg-unsubscribe@toku.us<br>Future and Past meeting information: http://LCTG.toku.us<br>List information: http://lists.toku.us/listinfo.cgi/lctg-toku.us<br>This message was sent to abroun@gmail.com.<br>Set your list options: http://lists.toku.us/options.cgi/lctg-toku.us/abroun@gmail.com<br></div></blockquote></div><br></div></div></div></body></html>