Difference between revisions of "password manager"
(→not filed: more; explanation about "form-filler only") |
(→List: quick table) |
||
| (3 intermediate revisions by the same user not shown) | |||
| Line 13: | Line 13: | ||
The most common PMs are: | The most common PMs are: | ||
| − | * [[KWallet]] (part of [[KDE]]) | + | * [[KWallet]] (part of [[KDE]]) (see {{wikipedia|KWallet}}) |
| − | * [[ | + | * [[GNOME/Seahorse|Seahorse]] (part of [[GNOME]]; formerly [[wikipedia:GNOME Keyring|GNOME Keyring]]) (see {{wikipedia|Seahorse (software)}}) |
| + | |||
==Windows== | ==Windows== | ||
| − | Windows does not appear to have a system for handling passwords or mediating access to a PM, so passwords must generally be copied by hand between applications and the PM. | + | Windows does not appear to have a system for handling passwords or mediating access to a PM, so either passwords must generally be copied by hand (either [[cut-and-paste]] or [[drag-and-drop]]) between applications and the PM or else the software must be aware of specific applications that might need passwords filled in. |
| + | |||
==Links== | ==Links== | ||
===Reference=== | ===Reference=== | ||
| Line 22: | Line 24: | ||
* [http://www.dmoz.org/Computers/Security/Products_and_Tools/Password_Tools/ open directory] (includes password tools that are not managers) | * [http://www.dmoz.org/Computers/Security/Products_and_Tools/Password_Tools/ open directory] (includes password tools that are not managers) | ||
==List== | ==List== | ||
| − | {{#ask: [[is a::password manager]]}} | + | {{#ask: [[is a::password manager]] |
| + | |?cost | ||
| + | |?home page | ||
| + | }} | ||
===not filed=== | ===not filed=== | ||
* [http://www.fastpasscorp.com/ FastPass Enterprise Password Manager]: geared toward higher-end customers | * [http://www.fastpasscorp.com/ FastPass Enterprise Password Manager]: geared toward higher-end customers | ||
| Line 32: | Line 37: | ||
* [http://www.madlogic.com/supersecret.html SuperSecret]: they make it too difficult to find the price; free download, but not clear if there's a free trial period | * [http://www.madlogic.com/supersecret.html SuperSecret]: they make it too difficult to find the price; free download, but not clear if there's a free trial period | ||
* [http://www.mandylionlabs.com/ Mandylion Research Labs]: aimed at legal compliance for corporate market; limit of 50 passwords | * [http://www.mandylionlabs.com/ Mandylion Research Labs]: aimed at legal compliance for corporate market; limit of 50 passwords | ||
| + | * <s>[http://www.symantec.com/passwordmanager/ Norton Password Manager]</s> is no longer at this URL | ||
'''"Form-filler only"''' means that the software does not seem to allow storage of arbitrary information; handles login forms only. It may be that the software ''can'' do this but the description doesn't bother to mention it. It would seem to be necessary even for a target audience ''only'' interested in access to online sites, because form-fillers often have difficulty detecting login forms (they can be deliberately made difficult to detect) and so it is still often necessary to cut-and-paste from the application. | '''"Form-filler only"''' means that the software does not seem to allow storage of arbitrary information; handles login forms only. It may be that the software ''can'' do this but the description doesn't bother to mention it. It would seem to be necessary even for a target audience ''only'' interested in access to online sites, because form-fillers often have difficulty detecting login forms (they can be deliberately made difficult to detect) and so it is still often necessary to cut-and-paste from the application. | ||
Given that the software does not seem to be ''targeting'' more general usage, however, I'm not bothering to file these applications for now. | Given that the software does not seem to be ''targeting'' more general usage, however, I'm not bothering to file these applications for now. | ||
Latest revision as of 14:02, 1 May 2011
About
A password manager (PM) is a software application which manages security credentials such as passwords, PINs, and private keys.
Desirable features include:
- searchability
- ability to secure all data with a master password or key
- ability to access from multiple locations
- encrypted storage of data (so that it can be backed up to an insecure location without revealing any credentials)
Linux
Linux distributions generally come with a password manager integrated into the desktop system (other applications needing credentials will check with the PM before asking the user to enter credentials manually, and will store manually-entered credentials in the PM for future use.
The most common PMs are:
- KWallet (part of KDE) (see Wikipedia)
- Seahorse (part of GNOME; formerly GNOME Keyring) (see Wikipedia)
Windows
Windows does not appear to have a system for handling passwords or mediating access to a PM, so either passwords must generally be copied by hand (either cut-and-paste or drag-and-drop) between applications and the PM or else the software must be aware of specific applications that might need passwords filled in.
Links
Reference
- Wikipedia
- open directory (includes password tools that are not managers)
List
not filed
- FastPass Enterprise Password Manager: geared toward higher-end customers
- IntelliLogin: Form-filler only
- Just1Key: online service only, details sparse unless you want to read the whitepaper
- KeyPass: Form-filler only
- KeyRing: PalmOS only
- LogonAssist: Form-filler only
- SuperSecret: they make it too difficult to find the price; free download, but not clear if there's a free trial period
- Mandylion Research Labs: aimed at legal compliance for corporate market; limit of 50 passwords
Norton Password Manageris no longer at this URL
"Form-filler only" means that the software does not seem to allow storage of arbitrary information; handles login forms only. It may be that the software can do this but the description doesn't bother to mention it. It would seem to be necessary even for a target audience only interested in access to online sites, because form-fillers often have difficulty detecting login forms (they can be deliberately made difficult to detect) and so it is still often necessary to cut-and-paste from the application.
Given that the software does not seem to be targeting more general usage, however, I'm not bothering to file these applications for now.