The recent cloud computing security issues including the possible security breach at Lastpass in May 2011 and now the major breach of the RSA SecureID system leading to an attack on major US military contractor Lockheed-Martin has many of us wondering how safe central password repositories are.
I have been using Lastpass, but with a less than perfect password. I was using 10 random characters. I have decided to fall back to a local solution. I am now using Keepass. KeePass is a local application for Windows, Linux, Android, iPhone, Palm, Blackberry, Mac and pretty much any other platform. It can be used as a portable app, carried on a USB stick.
I keep my database stored in a Dropbox folder and synchronized across my computers. The database is encrypted, and stored in an encrypted state on Dropbox.
I can access it anywhere I can connect to dropbox, or run a Windows app from a USB drive.
And it has one other benefit over Lastpass – Lastpass tends to wind up with multiple versions of passwords (if you change them) and knowing the current one becomes a management problem. Keepass keeps one password, and you can group them. For example I have three WordPress logins for different Blogs. With Keepass I can create three groups, one for each Blog, and keep all relevant information for that blog or personality.
