somehow Google gears or online solutions for safekeeping of my credentials don't make sense to me. [[the-geek.in]]

upnishad

@upnishad: Have a look at the Adobe AIR version as well.
You can use it completely offline, or in online>offline sync mode. It's your choice.
Cheers!
Tara

Tara-PassPack

is there a way to import your existing Firefox Passwords?

mickbw

@mickbw: Answer:YES. With the help of this extension: Password Exporter...does a good job it does what it says plus it has an option to encrypt your usernames and passwords...It can also import/export disabled host(sites where you choose not to remember your passwords)...
A firefox add-on that comes in handy with this is the Secure login works like magic wand in opera, even have a shortcut key (alt+N) and it can handle multiple usernames and passwords... hope you enjoyed

pandecoco

It may be just me, but I wouldn't trust an online password management service. All I do to store my passwords is remember them. However, if I was to store them on my computer, I would just make a password list in notepad then slap on AES 256 encryption.

thecodingeye

-

monkeyboy

@thecodingeye,

Its not just you. Any logical person would realize that using an online service to store passwords is crazy. Its like writing all of your passwords down and locking it in a box with a padlock on it, then handing it to Joe Blow on the street. Sure its encrypted, but how do you know that there arent any security flaws or sneaky employees working for PassPack?

monkeyboy

@all - Agreed. I would need to be convinced that the online storage system was verifiably more secure than any pseudo-convenient method I could implement myself before I would even consider an online password management system.

If I could trust the service, and that is a BIG IF, I think an online password management system could be of great help, especially considering the fact that I could then exponentially increase the complexity of my passwords, if and only if that online security system could somehow automatically fill in the password for me.

What scares me the most about this solution, ironically, is that my passwords would also be stored on my computer. The simple explanation for that being: If I trust this service enough to use it, then that would necessarily mean that I would trust their online storage more than my offline storage. That being the case, I wouldn't want an offline copy that would only be a personal security liability.

Simply put, ideally there should be an online password management system, with auto-fill capabilities, that can also demonstrate to me that it is more secure than any method I could use myself (other than writing my passwords on a piece of paper and locking them in my safe, lol).

If someone could offer that for free, I would be on board. Otherwise, I agree with everyone here... solutions like this just scare me.

zac.ice9

Is there any kind of a solution that integrates with Firefox's built in password management but who's key feature is syncing up with a thumb drive?

I would love to sync my passwords between work and home but am weary of the online services.

fuderyuu

Keepass on a Truecrypt thumbdrive? Works for me :)

Al Iguana

I just use the PasswordMaker addon in Firefox for all of my machines. You can export your settings to another machine and use the same hash password and viola. No need to store them or sync them anywhere. [passwordmaker.org]

Cyphon

Just to be clear, I know about Robo Form and hate it =(.

I hope there are other (possibly open source) solutions out there.

fuderyuu

@thecodingeye: Exactly.

TruCrypt works fine, as do a few other programs. Or, if you're really worried about someone stealing your passwords, don't save them on your hard drive at all. Either a flash drive or (surprise!) your camera's memory card.

saintseminole

TruCrypt it is.

upnishad

so, which one is better? air or gears version?

brudo

so, which version is better? gears or air version?

brudo

@monkeyboy: If you want to have a look at the Passpack code, you can. It all runs in the browser's Javascript DOM.

We use the Host-Proof Hosting pattern because that is what protects the data on the server from rogue employees. All the data is encrypted in the browser, then sent to the server without the keys.

We've also just released an open source library for creating Host-Proof Hosting application. If you want to learn more about the architecture, that's a good place to start.

Hope that helps.
Cheers
Tara

Tara-PassPack

@brudo: The Gears and AIR versions are practically identical. AIR is easier to install, but won't work on Linux. If you're running Linux, you're better off with Gears.

Tara-PassPack

Keepass and TrueCrypt work fine for me. For syncing the keepass file is on an usb-stick. So I can use it at every computer.

lfhckrreader

@fuderyuu I work for Vidoop and we have a password manager service at [myVidoop.com]

We allow you to save your passwords online or offline in an encrypted file. This file could be placed anywhere you would like. We also support OpenID and have lots of security options.

kfox