How do you remember all of your passwords?

Comments (50)

• I simply keep (and refer to) an open spreadsheet and enter new passwords etc into it in the alpha order of the particular web site. Every time I make a change I save it. My children (all grown) know where it is in case anything happens to me. Presently there’s about 187 user names & passwords entered.

• My bank and credit card passwords are not written down anywhere. I actually remember them, but there are not many. All other passwords are non-critical from a security point of view and I just have them on a list on the desk. It really does not matter much if someone else got to know any of them. As in a previous comment it would not cost anyway. Inconvenient, possibly.

• I use a address book a small pocket size.

• I use a word document that is archived on a seperate drive as well as my PC’s. The document lists a couple letters to identify the page, followed by one or two letters and a number which are only a part of the password. The letters are part of the password and numbers are old dial phone numbers from 50 plus years ago that only I would know.

• Good topic!
  I have 2 systems. For all of the sites that require a log in “just because” I use the same common 6 digit word and the number 1. I also have a looseleaf address book for my VIP (bank, credit card, etc) passwords. With the loose leaf format, I can add additional pages as needed to that letter of the alphabet. Or, if the page gets too sloppy–I can re-write it on a fresh page. I did use pasword safe for a while and it performs pretty well–the address book just seems quicker to me.

• For years I’ve just been putting them into a Word document, but my list is over 20 pages long now. I use a feature in Norton 360 that is supposed to save and remember them, but it doesn’t always work so I find myself going into the Word document to find it. They’re all alphabetical so that helps.
  I’d like to find a better way to do this. I had originally password protected my password file, but got tired of having to enter it every time I opened it which can be many times a day so I removed it. I only password protected it in case the computer was stolen or someone hacked into my system.
  I used to just use one password for everything, but some websites require so many characters or a limit so that didn’t work either. One thing I wish these sites would do is not show asterisks when entering passwords. I’m working from home so I don’t need to hide the passwords from myself. Usually I copy and paste from my Word document, but occasionally I get errors doing this so it would be nice if they’d get rid of the asterisk thing.

• I use a Mac, so I use 1Password. I’m pretty new at it, but I really like it so far…

• I teach a Data Security class at a local college and I have tried several password management applications. The one I have found most useful is Password Corral. It is free, easy to install, learn and use. The password file is always stored with a high level of encryption. I have approximately 500 passwords (all different by the way) but I have to only have on very secure password and that is the password I use to access the password file.
  Here are some of the reasons I chose Password Corral:
  For each site you can insert a hyperlink in the comments field and automatically launch your browser and go to the logon screen. A lot safer and more secure that clicking on a link in an email.
  You can set up groups of passwords: retailers, finance, genealogy, software, medical, services, etc. As an example, in the “Finance” group I store the username and passwords for a credit card with the URL for the site (bank) and email address for the bank. I can click on the URL in my password file and automatically logon to the site. In the comments field I store the account number, experation date, security code, 800# to report problems, etc. If I have problem or lose a credit card I pull up the password file and call and report the problem. It is also very convenient if I am ordering something on the internet.
  Since my wife and I travel several months of the year I have a “Medical” group. I use this groupave a record for my doctors, dentists, pharmacists, insurance company, etc. I really use this group as an address book with telephone numbers in case I need to contact one of them.
  You can store the file on a flash drive or at a website storage site like Dropbox and have you passwords available at hotels, airports, libraries, or anywhere you have access. You can set a timer to automatically close and encrypt the file and set the amount of time.
  I think it is a great little program and you can download the software at:
  http://cygnusproductions.com/freeware/pc.asp
  If anyone has a question they can email me at: glennkinkade@gmail.com

• I have been using Passpack (free for the first 100 passwords) for the last two years. works great, accessible from any computer, allows backup of data, and uses passwords of any length (including spaces) so that you can use your favourite quotation, or punch line of a joke, making an access password of many characters more than the usually recommended 8 characters. It makes the main password easy to remember.

• Like one of the previous posters, I also use KeePass Password Safe. I’ve used it for several years. I keep a copy of the software and my password database on a USB Flash-memory thumb-drive to make it portable.

• I have been using Billeo for several years. You enter one major password for all your sites.

• I use RoboForm2Go. It is installed on a pen drive and so can be used on any computer. When you exit the program no traces are left on the host computer. It is useful for generating and storing random passwords, the most secure kind. It can also insert personal information such as names and addresses into forms. Credit card details can be stored and added to online orders. Once set up all functions are achieved with one click, so keylogging is not a problem. All details can be synchronised online, so there is no danger of forgetting or permanently losing your details. Works for me.

• As also mentioned above I also use passkeeper.com – through updates and changes in internet providers over many years. The free-form area has been used for clues, tech phone numbers and e-mail addresses for sign in, etc. It works and is small. Its only problem is it is small. It will fill up over time. Now with all this collection of ideas and comments. I am looking for something new.

• I leave no passwords on my computer but as one person in this feed said “I use a hard copy” and I do as well. In a coil bound book with all my computer information in one section and all my passwords (except the bank card and that is in my head) in the other section. I’m a senior and this is the only way my husband and I can keep track of them all. Mrs. D.

• As mentioned above, freeware PassKeeper (http://passkeeper.com/) is excellent – simple, quick-loading, uncomplicated with no registry issues. Directly copy the small file to archive it or make it available on another computer. I’ve looked at many others, but keep coming back to Passkeeper – for over a decade. No complicated organization – just name, password and comment field, sorted in alpha order on name. A quick count shows I have well over 100 passwords, several repeated and many slight variations. I couldn’t get by without a password database. Most remain durable for years after my last visit to some sites. I do wish it would dump to print, however.

• I used to use:
  PasswordSafe (http://passwordsafe.sourceforge.net/),
  But then I found
  KeePass (http://keepass.info/ – also available via sourceforge)
  KeePass is much better (in my opinion). I use version 1 so I don’t have to worry about if the “other” computer has NET installed. Both version 1 and version 2 are supported & updated. Both are easy to copy to a USB key. Both have a lot of “bells and whistles” that you can use to make your life easier, or you can just use them as a simple “secured spreadsheet” type of tool.
  A FEW WORDS OF ADVICE:
  1) Once you use ANY password vault, you will probably not know your passwords by heart. So be sure you back up the vault (program and data) to another system (another computer or a USB key – something outside of your normal computer). Otherwise if it ever becomes currupt or if that computer ever crashes or gets stolen – you will have NO idea how to get into ANY of your places.
  2) I use the notes area to record which e-mail address I use for the web site for every entry (some sites I use “throw-away” e-mail addresses).
  3) Like another person above said – make sure SOMEONE else knows your vault password and show them how to get into it. If you ever die or get really sick, they may need it to get into sites on your behalf. (goes without saying – make sure it is someone you trust!).

• I use RoboForm2Go on a U3 USB key. This way the data, encrypted or not never resides on any computer. I carry it with me and can use it on any computer I have access to. I use Roboform to generate my passwords which are random 13 caracter or I use Steve Gibson’s site at https://www.grc.com/passwords.htm to generate my password. I have tried LastPass, but am still not real comfotable with security of that.

• I use my email account “contacts” that way no matter where I am or which computer I am on the only username and password I have to remember is my email account.

• I use a password protected Excel Spreadsheet, which I also print out periodically and stick in a file folder in a filing cabinet. This spreadsheet is also included on my backup harddrive.

• Most of the requirements for passwords are only ego builders for the software sellers. I keep the junk passwords on a printed list tacked up on a bulletin board beside the computer. I have a different system for the few that involve money, but that doesn’t need to be complicated or require special software. Like who cares if someone accesses Yahoo, CBC, the Globe and Mail,Fotobucket, Stockhouse, Abebooks or even Legacy and says they are you? It doesn’t cost anything.

• I change my passwords on a quarterly basis and use the last name of an ancestor, the year of their birth and then their initial(s). That way all I need to keep track of is the relationship which I can calculate in Legacy.

• I’ve been using RoboForm on my PC and RoboForm2Go on a thumb drive, which I can use on any computer away from home. I’ve even used it on a public computer in a hotel lobby without any problems. All I have to remember is one password to logon to RoboForm.

• Whichever product/idea you use, remember to entrust to someone the password for the computer. Our club computer guru was asked to “unlock” a nearly new laptop. The man’s wife had suddenly died, he know nothing about computers but desperately wanted the photos his wife had saved on the hard drive. The wife had set both user and administrator passwords in Win7. Our Guru got no where, there is seemingly no ‘crack’ to allow him entry. I use a combo of ‘LastPass’ and address book. And hubby and adult children know the computer password.

• I use a password protected OneNote file which contains all my User IDs & Passwords + links to all their relative sites. All Password and personal info is hidden in case someone comes up while my file is open. I also keep all my info for my bank cards, internet banking, a list of all software apps and links of where to get the apps as well as product keys (if required) for the app. I have a fairly cmplex network with security cameras and NAS so I also keep all my network IP and router setting too.

• I’ve been using KeePass for many years. It saves all of the passwords in an encrypted, it is free, it is open source. I don’t even know several of my passwords, since I have KeePass on multiple computers and my Palm and keep them synchronized. All I need is the MASTER password.

• I’m using RoboForm. Couldn’t live without it. The random password generator is a super feature.

• I use a little freeware program called Whisper 32 (http://www.ivory.org/oldwebsite/Default.htm). It simple, easy to use and easy to copy your data file to multiple computers to keep them all in sync.

• This is something I have struggled with over the years. The fact that there are so many different responses simply illustrates the problem.
  After trying many different software programs, I have settled on KeePass, mainly because it offers different versions which run on the PC (desktop), a USB stick, and they are currently working on a version for the iPhone. All of this means my passwords (software keys, etc.) are available wherever I need them.
  I have an observation which I liked to share: Please, please remember to backup your password file. These files can become corrupted, especially if you have set them to be encrypted, which you should. If you keep all of your passwords and software keys in one place this becomes even more important.

• I use a sheet with 16 randomly generated passwords to draw my Windows logins and U3 flash drive passwords from (updated quarterly/yearly). All other passwords are stored in eWallet (on my home pc, pocket pc, and U3 flash drive).

• I try using my memory but since that is not so reliable, I use an autofill feature of my internet browser or maybe its belongs to Norton (see memory not trustworthy). But mostly its a hard copy right next to the computer. I checked out the RoboForm site, is it really safe to use, because I like the sounds of it.

• I also use Password safe but keep the password file in a dropbox folder so it is backed up and also readily available from multiple computers.

• I recently retired from my career as an x-ray technologist and I used 9 different password/PIN combinations in performing my daily work. I too used a small address book that I slid in my uniform pocket to keep up with the everchanging passwords. Some of the patient identification systems changed every passwords every 3 months and you could not use a previous password or PIN again…ever. Thanks to all of you for different ideas!

• I have used RoboForm for years and can’t be without it.
  On my iPhone, I use SplashID — works great.
  Chap

• I use KeePass. I only have to remember one master password to open the ‘vault’ where all the others are kept. As of this writing I have over 400 entries including software serial numbers. This software also comes in a portable version which I always have with me on a flash-drive.
  Passwords can be auto-generated to replace weak ones and it shows you by way of a red-to-green bar how secure your passwords are. Each password entry has a place for additional notes.

• I like your system. It is certainly safer than my ‘one password fits all’ system. How do you deal with required password changes?
  Regards, JB

• I use a very simple program called Any Password from http://www.anypassword.com
  There is a free version and a paid version
  The program can create harder to break passwords if you so choose, and you only have to remember one password to get into the program

• I use Password Safe http://passwordsafe.sourceforge.net/ and I’ve had it for years so it is full of passes I dare not delete – but it does not matter. So I mainly have one password I really have to remember. That one comes from some letters in a book title. At home I have a network so I can open the Password Safe encrypted database from every computer here. I sometimes transport af copy of the file to my job – just to have an extra copy somewhere outside the house.
  For unimportant stuff, all the places you just have to sign up, I have more or less a common pass.
  For my blogs I have a sentense which is a good one as it includes some of the Danish special characters – so good I have problems logging in myself when abroad 🙂
  The passes I use the most even for important things I’ve learned by heart. So I’ll say I use a mixture of many methods and in some strange way it works 🙂
  Thanks for a good, inspiring and relevant blog!

• PassKeeper (http://passkeeper.com/) has served me well for many years. And, I keep it backed up offline with MozyHome. Both are free.

• I use Robo Form passwoed manager and I love it, there is a free one with limited passwords and a pay version with additional features and additional passwords.

• “I use a theme. It used to be characters from the Beatrix Potters books (when I had young children). Now its surnames of my ancestors. However certain letters are replaced with numbers Eg. L=1, E=3, S=5, B=6 etc”
  Gary, I believe this system to be relativily safe because 1. You would need to know my theme (oops looks like you do now) 2. You need to know the name (this changes) 3. I use a sequence of Caps, lower case and particular numbers. So you would still be there all day trying the permutations. 4. My bank account only giving you 3 tries to guess it.

• I keep all passwords in an easily searchable excel spreadsheet file which is located in larger encrypted file which acts like a drive to the Windows OS. The encrypted ‘drive’ also contains all my other sensitive financial files as well. If my laptop were stolen, it would nearly impossible to be unencrypted. The encryption is supplied by a powerful freeware program called FreeOTFE (free on the fly encryption). One password is all I have to remember to access over 200 logons/userids/passwords.

• I have used RoboForm for a year or so and love it.

• I use a similar system to the addressbook. I use an alphabetized index card file.

• I, a former computer tech, use hardcopy. Believe it or not. I have a small addressbook that sits next to my computer. Easily portable. For those times when a computer may “die”, as happened to me last year. It also is not hackable. I try to use a similar password on different sites but not all will accept it, so different pwds. But I like a couple of the ideas already posted and may incorporate them. Thanks for the tips.

• I use KeePass Password Safe – it’s a cross-system password storage software, that can also auto-type (get to a webpage, press Ctrl-V, it’ll do the hard work of logging in for me).
  It can generate passwords based on any chosen criteria, and this means all my passwords are unique, strong (130+bit) and don’t use any pattern that may easily be guessed like others have mentioned.
  Storing the encrypted password database file on Dropbox means I’ve always got access to my passwords when I need them, no matter which machine I’m on.
  Oh, and it’s completely free 🙂

• I use a theme. It used to be characters from the Beatrix Potters books (when I had young children). Now its surnames of my ancestors. However certain letters are replaced with numbers Eg. L=1, E=3, S=5, B=6 etc

• I use a password manager called LastPass. It uses a password for access, which can be selected from a random generated list. I modifed one slightly to get a password I can remember. The first time you log on to a site the manager will ask if you want the manager to remember the user name and password for that site. It has lots of other features too. I am very satisfied with it.

• I use eWallet to remember my passwords. There is a Windows version which syncs with my Windows Mobile smartphone so I always have my passwords handy. eWallet has built-in templates for different types of information I want to remember like web site passwords, email passwords, credit card info, personal info (SSN, etc.) and bank accounts. I also setup Microsoft’s Live Mesh which synchs files with other computers so I have my eWallet available on both my home PC and my work PC in addition to my smartphone. eWallet is one of my must have apps.

• I use lastpass https://lastpass.com/ and love it. I had struggled for years with this problem until a month or so ago when I discovered it.
  I have it on my main Dell desktop and my ASUS T91MT netbook/tablet. I can also sign in from any computer and have all of my most needed web sites and passwords immediately accessible.
  Great program and it’s free.

• Here is my password system:
  I have a “root” or “base” password of 8 characters. It is a mnemonic device.
  For each site I add 3 characters in front – they represent the name of the website. For Amazon it would be “Ama” for Ebay it would be “Eba”
  And then I have an ending character after the base password which is a special character (such as ! # or &). If a site doesn’t allow non-alpha numeric characters then I leave this off.
  This has been the only sane way I can track passwords. When all else fails I use the “forgot password” link and wait for the email!