Storage of Passwords

Discussion in 'Business & Enterprise Computing' started by stalin, Feb 25, 2008.

  1. stalin

    stalin (Taking a Break)

    Joined:
    Jun 26, 2001
    Messages:
    4,581
    Location:
    On the move
    Where does everyone store their admin/root/enable passwords?

    Paper in a safe.
    Email.
    H:\.
    Password protected word document.
    Dedicated password storage software?
    If so what?

    Combinations of the above?
     
  2. Primüs

    Primüs Member

    Joined:
    Apr 1, 2003
    Messages:
    3,360
    Location:
    CFS
    *points to brain* :) All thats really needed at the moment.

    If we were to store it somewhere, its usually inside a personal use/password protected hard drive. In my case an exchange drive in a folder with specific user access etc.

    I haven't had to do this yet, i find it quite easy to remember a password after one or 2 typings of it.
     
  3. Crusher

    Crusher Member

    Joined:
    Aug 27, 2001
    Messages:
    3,069
    Location:
    Sydney & Adelaide
    At work, in an encrypted notes database

    At home, in an app called PINs that encrypts the data file with a 512 bit blowfish algorithm
     
  4. fad

    fad Member

    Joined:
    Jun 26, 2001
    Messages:
    2,220
    Location:
    City, Canberra, Australia
    how about pgp encrypted?
     
  5. Iroquois

    Iroquois Member

    Joined:
    Jun 27, 2001
    Messages:
    1,958
    deleted post
     
    Last edited: Mar 25, 2016
  6. Kermalius

    Kermalius Member

    Joined:
    Mar 15, 2002
    Messages:
    870
    Where's the option for "Post-it attached to the monitor"?
     
  7. kombiman

    kombiman Dis-Member

    Joined:
    Dec 3, 2006
    Messages:
    11,550
    Location:
    viva brisvegas

    +1

    or random bits of paper under my keyboard
     
  8. Dave31

    Dave31 Member

    Joined:
    Feb 24, 2005
    Messages:
    293
    Location:
    On the Motocross track
    Admin for the production File and print directory is stored in a lock and key safe.
    A range of other passwords (Other tree admins, rconj, AD restore) are in a password protected excel doc on a sentinel audited, user restricted, separate volume that only the corporate administrators have access to :) (sentinel is overkill but we had the option to test it out :) )
     
  9. OP
    OP
    stalin

    stalin (Taking a Break)

    Joined:
    Jun 26, 2001
    Messages:
    4,581
    Location:
    On the move
    !!!!! You have/use Sentinel???? serious?
     
  10. Rezin

    Rezin Member

    Joined:
    Oct 27, 2002
    Messages:
    9,488
    For personal passwords I use Password Agent, which has some neat features.
     
  11. looktall

    looktall Working Class Doughnut

    Joined:
    Sep 17, 2001
    Messages:
    24,411
    at the moment they're stored in email because the list is still being created (i'm starting my 4th week with the company), but i might use a password protected excel file once i have all of the passwords i need.
     
  12. OhFoRkMe

    OhFoRkMe Member

    Joined:
    Apr 27, 2005
    Messages:
    3,057
    Location:
    Joyner 4500
    +1 for in brain

    and in password protected excel document on one of the General managers laptop which is seperate from the network.
     
  13. mr.ilford

    mr.ilford Member

    Joined:
    Dec 26, 2007
    Messages:
    101
    Location:
    At work
    Keypass (AES encryption) on a locked down server, available (physical and data wise) to only my team.
     
  14. Doc-of-FC

    Doc-of-FC Member

    Joined:
    Aug 30, 2001
    Messages:
    3,280
    Location:
    Canberra
    +1 for keepass: http://keepass.info/help/base/security.html

    here it is on a terminal server that has named accounts for people to store their DB files.

    limited access to sysadmins, passwords are also changed on 30 day basis.
     
  15. Urban_Jungle

    Urban_Jungle Member

    Joined:
    Sep 25, 2006
    Messages:
    619
    Location:
    Thirlmere
    Ha wouldn't it be a bitch if you forgot the password to the excel document lol. Sorry that just amused me. Ours are kept in a safe.
     
  16. Dave31

    Dave31 Member

    Joined:
    Feb 24, 2005
    Messages:
    293
    Location:
    On the Motocross track
    We are 'playing' it, a project requires a very high level of security... but I don't think they'll want to pay the costs for Sentinel so I can see they'll just settle for Novell Audit.. even though they really need the non-repudiation feature!!... therefore the project really won't meet their goals, making it a waste of time and money... but thats Government for ya!

    Guys with passwords stored in your head... it's time to change!
     
  17. Squeezer

    Squeezer Member

    Joined:
    Feb 25, 2002
    Messages:
    6,852
    Location:
    Adelaide
    Have used PasswordSafe in the past ( It's free ) and has good encryption.

    I wouldnt recommend password protected excel files given the abundance of Excel password crackers out there
     
  18. OP
    OP
    stalin

    stalin (Taking a Break)

    Joined:
    Jun 26, 2001
    Messages:
    4,581
    Location:
    On the move
    Sentinel is awesome. Really, really awesome. We had the CTO of Novell (previous CEO of eSecurity) come and demo it to us. Its brilliant. I have also done the ATT for it.

    I would be pushing for it hardcore, once you get it in, its easy to just expand it to anything and everything you want! :)

    PS.. I think I just worked out who you work for ;) Will chat on PM, to avoid trashing my own thread :)
     
  19. OhFoRkMe

    OhFoRkMe Member

    Joined:
    Apr 27, 2005
    Messages:
    3,057
    Location:
    Joyner 4500
    You would have to be stupid and therefore you wouldnt be in the position in the first place...
     
  20. aXLe

    aXLe Member

    Joined:
    Jun 27, 2001
    Messages:
    1,156
    Location:
    Brisbane
    Looks like a plain text file on a bitlocker encrypted disk is not such a good idea : http://citp.princeton.edu/memory/

    Perhaps though that method could be expanded to retrieve keys for password safe type applications as well.
     
    Last edited: Feb 25, 2008

Share This Page