Best Online Password Manager?

Question

I work for a team that's looking for a replacement for our online password management package, which we use to keep track of various ftp accounts and so on. Our current solution is shaky at best (it's PHP-based, the master password is hardcoded into the login checking function, etc). A lot of the passwords are out of date anyway, so we're going to scrap what we've got and start over.

What (preferably open-source) online solutions have you used in the past? Are there other approaches that you'd recommend in place of an online storage system (e.g. local hosting)?

Answer 1

I haven't tried it yet but I plan to, https://www.getdropbox.com has been making the rounds.

Answer 2

Personally, I would recommend using something like PasswordSafe, and keeping your password file on a WebDav folder. That way you can easily access the file from anywhere, and you don't have to worry about unencrypted information travelling over the internet, or having unencrypted data on some server. Also, to add, unlike using getdropbox.com, you can host it easily on your own servers.

Answer 3

My preferred method is password safe data file in a drop box account.

You can share the file with everybody and get web access to it from the dropbox website.

Answer 4

I use KeePassX and a sftp account at my university.

Answer 5

I've been happy with SuperGenPass. It's not a password manager, but it generates random strong passwords based on a hash of your master password and the domain name of the site. It's web-only so you can't use it for ftp or anything else.

Answer 6

Mitto.com is my password manager of choice.

Answer 7

I'm trying gpg. It's pretty easy.

Put all your passwords in a text file, use gpg to encrypt it, then delete the plain passwords file.

When you need a password, just gpg -d passwords.asc

Example in Cygwin: (you don't see the lines where it asked for my password when encrypting/decrypting).

bash-3.2$ echo "my passwords" > passwords
bash-3.2$ gpg -ca passwords
gpg: WARNING: using insecure memory!
gpg: please see http://www.gnupg.org/faq.html for more information
bash-3.2$ cat passwords.asc
-----BEGIN PGP MESSAGE-----
Version: GnuPG v1.4.9 (Cygwin)

jA0EAwMChOHx3qzifNdgySVfjo/Fj535zG92LaPcR+5UdtobvEz12OT1ArsSbOGp
2shkodFV
=7Jt3
-----END PGP MESSAGE-----
bash-3.2$ gpg -d passwords.asc
gpg: WARNING: using insecure memory!
gpg: please see http://www.gnupg.org/faq.html for more information
gpg: CAST5 encrypted data
gpg: encrypted with 1 passphrase
my passwords
gpg: WARNING: message was not integrity protected

I'm using it in Cygwin, but there are other options: link text

Answer 8

There are some well known online password managers like LastPass, PassPack, MashedLife, Clipperz. One of them, Clipperz, also provides an open source community edition which I think is a good alternative for you. Many of them provides either a browser extension or bookmarklet, also supports "host-proof hosting" for increased security and to gain customers' trust.

Answer 9

Hi, If you really want an online password manager, try Mitto or PassPack. But I prefer an offline method: KeePass.

Answer 10

Logaway.com is my password manager of choice