How do you handle password security?

Forum Moderators: LifeinAsia

Message Too Old, No Replies

How do you handle password security?

aus_dave

11:30 pm on Feb 4, 2003 (gmt 0)

I mostly manage my clients' domains directly i.e. set up email addresses, upload files, anything to do with web hosting. I also have a reseller hosting set-up so can access the sites using a master password if necessary.

I'm interested to know how others manage client passwords for web hosting and email. For example:

- do you keep a master list on paper
- do you keep anything to do with passwords on your local computer, even if it is encrypted?
- do you regularly rotate passwords even if they are very hard to crack
- do email passwords require the same level of security (are say 8 letter nonsense words without numbers mixed in ok?)

Any comments on the above would be of interest to me ;).

Syren_Song

1:54 pm on Feb 7, 2003 (gmt 0)

Good questions, aus_dave. I didn't realize it until I saw your post, but I've been thinking the same thing myself.

I've been keeping passwords in a plain, neutrally-marked text file (on a floppy) and print it out regularly, just in case....

As for format, I prefer a combination of upper and lower case, as well as numbers. Makes it harder to crack, as I understand it.

rogerd

2:14 pm on Feb 7, 2003 (gmt 0)

I use a password safe on my PDA, and sync on two different computers for redundant backups. Probably should lock up a hardcopy someplace, too.

Jesse_Smith

7:49 am on Feb 22, 2003 (gmt 0)

I glue them to my brain. :)

digitalghost

7:53 am on Feb 22, 2003 (gmt 0)

>>- 1. do you keep a master list on paper
- 2. do you keep anything to do with passwords on your local computer, even if it is encrypted?
- 3. do you regularly rotate passwords even if they are very hard to crack
- 4. do email passwords require the same level of security (are say 8 letter nonsense words without numbers mixed in ok?)

1. On paper? Never.
2. Yes, I encrypt them with PGP.
3. Yes, passwords can be hard to crack, PGP encryption is extremely hard to crack.
4. Email passwords require the same level of security you would apply to any sensitive information. My advice is to use PGP encryption for ALL sensitive email communication. Standard email isn't a sealed letter, it is an open postcard.