EVERNOTE passwords were hacked

[bullet]

Originally Posted by CWatkinsNash

They have mobile device apps (iOS, Android, Win, Symbian, Blackberry, WebOS) available with LastPass Premium, which is $12US / year. On my tablet, I have the LastPass extension for Dolphin browser in addition to the regular LastPass app.

Changing passwords is pretty easy. It usually detects that you've changed your password and asks you to save the changes. If it doesn't detect it, it's easy to pull up that site info from the vault and make the changes.

It's not flawless, sometimes you have to manually tell it that you're on a login page depending on the site design, but with the browser extensions, it's available at all times so at the most you might have to click an extra time or two to fill in your info. I've been using it for at least a couple of years now, and have had premium for the last 5 months or so.

You can even set different security options for devices / sites. For ex, on my home desktop, I leave LastPass logged in, but I have some sites set to require the LastPass main password every time, like Paypal.

With the premium version you can also add "Multifactor authentication via USB Thumb Drives" for use on "untrusted" devices with Sesame. If you don't have the thumb drive, you cannot get in to Lastpass. Here's their video on it:

https://lastpass.com/support_screenc...eature=sesame1

Of course if someone gets your thumbdrive or a copy, they can get in if they know your Lastpass master password. Nothing is totally secure, but I think this is pretty close to "bullet proof".

This works on linux and windows. You just have to format the usb as ext2 (linux) and fat32 (windows) allowing each OS a readable, working executable storage location for Sesame.

I am not paid by Lastpass. Just a satisfied customer that uses it on all my devices. They are very proactive.

[Kumabjorn]

What happens on sites that require a second layer of security?

[curtw]

Originally Posted by Kumabjorn

What happens on sites that require a second layer of security?

With Google, when you sign up for two-factor security, you have to give them your cell phone number. When you want to use a Google service, after you enter the correct password, you receive a text with a six-digit code that's required to complete the login process.

If you are afraid you'll be out of cell range when you want to use Gmail, you can also get a "pad" of a few codes that can be used any time.

[afv011]

Originally Posted by curtw

When you want to use a Google service, after you enter the correct password, you receive a text with a six-digit code that's required to complete the login process.

If you are afraid you'll be out of cell range when you want to use Gmail, you can also get a "pad" of a few codes that can be used any time.

There are other ways as well. What I use is the Google Authenticator phone app, which generates a 6-digit code that you need to enter after your password. This is more convenient as you don't need network coverage (and SMS is unreliable), and is more secure than the printed set of password you can use as well.

[Kumabjorn]

Originally Posted by afv011

There are other ways as well. What I use is the Google Authenticator phone app, which generates a 6-digit code that you need to enter after your password. This is more convenient as you don't need network coverage (and SMS is unreliable), and is more secure than the printed set of password you can use as well.

Didn't know about that, is it limited to U.S.?

[alicepattinson]

Me too, I dont know about the Google authenticator. Thanks for sharing!

[medard]

Originally Posted by Kumabjorn

Didn't know about that, is it limited to U.S.?

No. I use a similar system from Google in Europe.

[afv011]

Originally Posted by Kumabjorn

Didn't know about that, is it limited to U.S.?

No, I'm not in the US but Canada, and works without issues.