Comment by dexen | Hacker News Reader

Comment by dexen | Hacker News Reader

How's passwords an unsolved problem for any power-user? There's a ton of password management software out there that does /not/ require you to copy-paste passwords around†.

For me, kwallet & ssh public keys all the way. Kwallet makes passwords available to all programs I authorize. Authorize either on case-by-case basis, or once forever. If you really don't want to bother with KDE and/or want to be easily portable across everything POSIX, go for http://en.wikipedia.org/wiki/Factotum_(software) -- it has a simple protocol.

I remember literally 5 passwords: home computer, work computer, home wallet, work wallet, auxilliary bank account (just in case something happened to all of my computers at once).

Actually, scratch that, I can /type/ those passwords, but I don't really know their content.

† using ^C^V on passwords is a bad idea anyway; (depending on browser) websites can read contents of your clipboard. And check your recent browsing history. 2+2=...?

I don't believe any browser except Internet Explorer allows you to read your clipboard's contents, without pasting. (Another reason not to use IE.)

I was always annoyed by the fact that I couldn't copy-paste stuff in Google Docs and had to ^C ^V it. Now I realize this is a feature.

Do any modern browsers allow reading of the clipboard contents without prompting the user to allow it?

Copying and pasting passwords about is fine, as long as you don't leave them in the clipboard after you've finished with them.

keepasss is a better solution; it does the same auto-entry thing, but stages part of your password through the clipboard and part through direct keyboard entry. Works everywhere (even on mac and linux) and is far more usable.

Is there an import/export tool for Keepass Droid by any chance?

My main current password management grip is that I don't have a good way of migrating my GPG-encrypted password file to my phone, other than hand-entering values one at a time.

That and updating password files kept in different locations.

Dropbox works for me as a one-way sync (computer to phone)

Keepass2 also has a "synchronize" feature that can merge edits made in memory to a stored file on disk; just throw your keys into dropbox, and when you need to change anything just hit "synchronize with file" and it will merge your keys. Works great.

Reply on news.ycombinator.com