Posts

Showing posts with the label Password Management

Can I Use Multiple URLs In The URL Field Of KeePass?

Image
Answer : You can create a copy of a password entry: And then only use references for username and password in the new entry: Then, adjust the URL in the new entry. The answer from Oliver Salzburg is very good. Complementing it, if you already have an entry and want to link another entry, go to the entry, properties, then tools, insert field reference and link to the type you need. See an example here: Switch to KeePassXC. As of the 2.5.0 release, this now works as you would expect.

AWallet Password Manager

Answer : aWallet specifically: don't use it. The creator obviously doesn't know what they are doing. I'll just pick out one concern (there are several that will probably be more obvious to People Smarter Than Me): it could encrypt your database in ECB mode (sometimes, but not always). ECB mode is notably not secure because the same plaintext always encrypts to the same cypher text. Therefore, ECB mode "does not hide data patterns well...it doesn't provide serious message confidentiality, and it is not recommended for use in cryptographic protocols at all". Password managers in general: use one. But pick a well-known one with good reputation like 1Password, LastPass, KeePass, Dashlane, etc. Or at least use one created or recommended by a well-known security company or security researcher if you don't know where else to look. A good password manager with competent encryption ( not aWallet apparently) is perfectly safe to keep on cloud storage, provid...