How do you manage your passwords

[ScottW]

They changed the name, Password Vault.

http://www.lavasoftware.com/Password...d%20Linux.html

Has lite version and pay version, I think it was only like $15.

[chevy]

I use a short series of passwords for some accounts, and I write complex passwords for more secure accounts.

[Rhisiart]

I used to have web space with a company in Dublin. They sent an email to all customers advising them to ensure we use secure passwords for our accounts, as one customer had apparently used 'IRELAND' as his/her password.

[chevy]

How do they define a secure password ?

[bbloke]

Originally Posted by rhisiart

I used to have web space with a company in Dublin. They sent an email to all customers advising them to ensure we use secure passwords for our accounts, as one customer had apparently used 'IRELAND' as his/her password.

Actually, it bothers me a little that they would know people's passwords (I assumed they would use a root account to let themselves into people's accounts, without ever actually knowing the user's password) and that they would tell other users what one person's password was...

[ScottW]

It is common practice for companies that have a dedicated security team, to run "dictionary attack" (inside job, so not really an attack) against their own user base, to find out who is using "password" and other common words, accounts that would be prone to a dictionary attack.

Educating is key and by letting people know that someone had such a simple password (which may have been changed already) it gives people an idea of what a silly password would be.

[chemistry_geek]

I work in a corporate environment and am required to change my password ever 3 months, so I resort to using the names of characters from TV shows or books in combination with numbers. On my Macintosh at home I have only one password that I've ever used, and on the web, I use a version of just one word. So far everything I do with passwords has worked well.

[bbloke]

Originally Posted by ScottW

It is common practice for companies that have a dedicated security team, to run "dictionary attack" (inside job, so not really an attack) against their own user base, to find out who is using "password" and other common words, accounts that would be prone to a dictionary attack.

Ah, yes. Of course!

I misinterpreted it as meaning they knew or could access everyone's passwords, which would make me rather wary.