If one wanted to be paranoid about protecting access to critical accounts (bank accounts and the like) what are some steps that you can take short of building your own machine and never using it for any transactions at all other than those to the secure sites?
I have used lAstpass and 1 Password for years but frankly all of the recent revelations of security breaches and key loggers and the like make me wonder if I should consider other options for critical accounts (wondering out loud: is it not likely that the password app manufacturers were not NSA's first targets?)
Some accounts do not allow two step authentication.
posted by dougiedd
on Mar 12, 2014 -
My dad passed away on Friday, and my mom is eager to get into his computer (Song Vaio running Windows 7) and Blackberry (Bold). Both are password protected. Is there any way to change the password on each without wiping the data? I'm fairly computer literate, and my father will have every software disk he's ever received. We also have access to his email if that helps with the Blackberry. Thanks.
posted by i_am_a_fiesta
on Feb 9, 2014 -
My dad had his computer reformatted and now he doesn't remember his Hotmail password because it used to be saved in his browser. We tried to recover the account by going into the "Can't access your account?" section, but we were unsuccessful. He can still access his emails via the Mail app on his iPhone. [more inside]
posted by kag
on Jan 31, 2014 -
My "throw-away" password is in the list of those compromised by the Adobe hack. It's a common dictionary word that I use for sites that I really don't care about security on: things that I don't even understand why they should be password protected, "test-driving" sites or products where I don't intend to keep using them, and an old email account that was for a blog that I haven't updated in about four years. (And I don't use the account any more). I'm pretty unconcerned about it being compromised. Is there any reason I should
worry? And if I do want to change it, is there any way to find out what all the sites are that I have used it on in the past? [more inside]
posted by lollusc
on Nov 22, 2013 -
My newly obtained MacBook has a minor but annoying behaviour. I have it set up to lock when the display goes to sleep. But when I unlock it, it relocks again. What gives? [more inside]
posted by outlier
on Oct 1, 2013 -
My staff use a number of Word 2010 templates that I need to restrict the editing of. I want users to be able to double click on the file and be able to make any changes they need (not just adding text to fields), but opening via right-click-open would require a password to save changes to the original template. I need to keep the .dotm files as they are. Everyone involved is using Windows 7. [more inside]
posted by rhapsodie
on Sep 26, 2013 -
I have accepted an offer on a MacBook air I sold on Craiglist. I am ready to take this to the buyer. I can't get the damn thing to forget my network password. Need to do this ASAP so I can hand it over. [more inside]
posted by instead of three wishes
on Sep 15, 2013 -
Any hacks to force an Apple device to accept a 7-character wifi password? [more inside]
posted by Opal
on Aug 28, 2013 -
For probably a year now, I have been receiving a lot
of "You have requested a new Facebook password" e-mails. For example, I received eight in my inbox this morning, on top of four yesterday. What is going on, and how can I stop this? [more inside]
posted by karbonokapi
on Aug 2, 2013 -
I am part of a nonprofit that has a dozen or so board members and assorted helpers. There are a variety of accounts for members and for the nonprofit itself that could use some sort of centralized management system (our website, google and social media logins, email accounts, bank accounts). Is there anything freely available that can help us manage access? [more inside]
posted by jsturgill
on Jul 12, 2013 -
My Windows 7 password is not working, so naturally, I'm locked out of my computer/life. If my computer worked, I would continue googling for an answer. Unfortunately, this vintage Dell desktop I'm using is trying my patience. [more inside]
posted by she's not there
on Jun 12, 2013 -
A while ago, I backed up a bunch of old cell-phone photos in a big (~800MB) ZIP file. Much later, I find that I inadvertently or forgetfully password-protected it, and now I can't get to all my old photos. I've tried the brute-force, dictionary, and other approaches through applications like this
. Am I out of luck? [more inside]
posted by jeffjon
on Jun 10, 2013 -
My Gmail account was very definitely hacked on Sunday.
A whole lot of email was sent, seemingly to everyone I've ever corresponded with from that account.
There was clearly a login from Poland which corresponds exactly with when the emails began to be sent.
The session seemed to last about 7 minutes.
I then received about 150 "mailer daemon" emails due to the bounces from either old addresses, addresses which don't receive unsolicited email and mail servers which correctly identified the content as spam. [more inside]
posted by dance
on Jun 3, 2013 -
I'm configuring my wife's iPad 1 to work with our WiFi network. Because our kids also use it, we'd like it to "forget" the WiFi connection when we disconnect. [more inside]
posted by never used baby shoes
on Jun 1, 2013 -
We lost our network analyst recently, and he left us with almost no documentation. The network is having some issues, and we are troubleshooting, but we cannot get access to one of our switches - it's a Dlink DGS-3450. No problem, right? Well every manual with instructions I can find via Google online is coming up with a 404. We found reference to an addendum with instructions - no luck.
Has anyone done this successfully? Any ideas how to do it without losing configs? The configs are crucial - we can't lose them. Tech support for D-link is closed.
Thanks in advance!
posted by routergirl
on May 11, 2013 -
Does anyone have a simple method of coming up with a excellent new passwords for every website that you can nevertheless easily remember? I'm thinking some combination of a master password combined with the website url or something like that, but the underlying rule should not be easily guessable by others even if they have a few examples in front of them. Any ideas?
posted by shivohum
on May 1, 2013 -
I'm a recent Chrome user, and so far I'm having a hell of a time with the privacy settings. I like the idea of using the synch feature so I can have my bookmarks and things shared across the three or four desktops I use. However, I can't seem to figure out how to make it so it doesn't sign in automatically when I open the browser - I would like to be prompted to put in a password every time.
I feel really stupid, but I can't figure out how to make that happen. [more inside]
posted by Think_Long
on Mar 29, 2013 -
Instead of the usual "username/password" challenge, some bank websites ask you for a username, and then for some letters from your password -- e.g. 'Type letters 1, 4 and 7 of your password'. I understand that the advantage of this is that you never enter your whole password, thereby making life difficult for keyloggers. But I don't see how it's possible to implement such a system without (effectively) storing the password in plain text on the server, which surely not a good idea. What is this practice called? Do security experts consider it good practice? Can you point me to a paper that explains how it is implemented securely?
posted by beniamino
on Mar 28, 2013 -
twitter won't recognise my password, or send an email to the related gmail account - now what? [more inside]
posted by gusset
on Nov 5, 2012 -
Is there a free downloadable mac program to password protect my entire usb flash drive? I've already tried TrueCrypt and using a .dmg with Disk Utility.
posted by CarlyH
on Oct 30, 2012 -
Statisticsfilter: Given available information about the distribution of self-selected 4-digit passwords (specifically banking PINs), is it possible to calculate the probability of two randomly selected individuals having the same PIN? If so, what're the odds? [more inside]
posted by myrrh
on Oct 27, 2012 -
What's a better-security alternative to Spam Arrest for challenge-response email?
I received a password reminder email from Spam Arrest today. It included my full password in cleartext, and when I went to change my password to a long semi-random string of hashed characters I discovered that they silently truncate entries to 20 characters, which would have locked me out if they didn't keep everything in the clear to remind me. Frightening. Is there anyone out there who offer C/R email and knows how to store passwords?
posted by migurski
on Sep 8, 2012 -
I'm trying to change my PayPal password. Normally I would copy-paste the new password in from KeepPass (or gedit), but PayPal disables copy-paste. That means I need to accurately type in a bunch of fiddly deliberately-hard-to-memorize characters, which only show up as asterisks, TWICE. Which apparently I am incapable of doing, whereupon PayPal kicks me out for two hours before letting me try again. Please help me figure out a workaround to solve this stupid problem. [more inside]
posted by Susan PG
on Aug 10, 2012 -
My daughter put a password on her iPod and promptly forgot it, which would be fine if iTunes didn't stop responding every single time we try to sync it. I really don't want to lose everything that is on there, especially her pictures and purchases. Help me be a hero to my daughter and tell me how to fix it.
posted by Ruki
on Apr 14, 2012 -
Please help me find the password management solution I'm hoping exists: the ability to automatically, dynamically sync a specific folder of passwords between accounts w/o involving Dropbox. [more inside]
posted by pavane
on Mar 20, 2012 -
Why doesn't my browser remember me on one partciular site when accessed from my desktop when it does on my laptop? [more inside]
posted by xchmp
on Feb 13, 2012 -
Please share some great user interface examples involving password setup and password reset. [more inside]
posted by odinsdream
on Jan 11, 2012 -
Does anyone remember a list of logins and passwords, for a myriad of sites, published online for all the world to use? Its advertised purpose was to allow one to use a website without having to register for access... so you didn't have to go through all the steps, nor receive spam in your inbox later... I think it's been several years since I've even thought of this -- also, I feel it had some form of 'gator' or other reptile in its name.
posted by Tandem Affinity
on Jan 9, 2012 -
My Gmail account was compromised a few days ago and the password was changed. I've since recovered it, but I'm wondering what could have caused it. [more inside]
posted by alligatorman
on Dec 29, 2011 -
A software application needs to supply a fixed password to an outside hardware device that it talks to. How can that password be concealed from hackers who take apart the software or the computer it's running on? [more inside]
posted by Paquda
on Nov 24, 2011 -
My wife is locked out of her netbook (W7 Starter). We're far from home with no backup or password recovery disks. Can I create a backup from my son's identical netbook and install? [more inside]
posted by KokuRyu
on Nov 21, 2011 -
I can't seem to password protect my local network for my Imac & Mac laptops. Help me, please. [more inside]
posted by jammy
on Nov 21, 2011 -
So despite being fairly knowledgeable about these sorts of things, I put on my own little "worst practices in computer security" seminar with my Mac Mini HTPC. And, surprise of surprises, it was compromised. Help me figure out if I've reversed the damage, won't you? [more inside]
posted by supercres
on Nov 17, 2011 -
I am looking for a password keeper app for my iPhone. Ideally it would be able to open a specific URL and autopopulate the User ID and Password fields. Personal experience with your suggestions is a big plus. Thank you!
posted by Rad_Boy
on Oct 28, 2011 -
Is the an ipad or iphone app. that would keep track of my user id and passwords from various websites, i.e. banks, credit cards companies, etc.
posted by Noodles
on Aug 14, 2011 -