Welcome to the MacNN Forums.

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

You are here: MacNN Forums > Software - Troubleshooting and Discussion > Applications > Password Manager that can sync

Password Manager that can sync
Thread Tools
Junior Member
Join Date: Nov 2002
Location: London
Status: Offline
Reply With Quote
Feb 10, 2007, 11:20 AM
 
Is there a good password manager app out there that can be synced across via iDisk? I currently use a password protected Word document which I don't think is safe enough.

Thanks
"most people are fools, most authority is malignant, god does not exist and everything is wrong" - Ted Nelson
     
Clinically Insane
Join Date: Mar 2001
Location: yes
Status: Offline
Reply With Quote
Feb 10, 2007, 12:39 PM
 
Originally Posted by taldrich View Post
Is there a good password manager app out there that can be synced across via iDisk? I currently use a password protected Word document which I don't think is safe enough.

Thanks

Bad idea...

I don't think Apple offers Secure WebDAV yet, so the last thing you would want to do is make all of your passwords available via authentication as flimsy as WebDAV (basic http auth).
     
Junior Member
Join Date: Nov 2002
Location: London
Status: Offline
Reply With Quote
Feb 11, 2007, 05:51 AM
 
Good point, thanks.
"most people are fools, most authority is malignant, god does not exist and everything is wrong" - Ted Nelson
     
Professional Poster
Join Date: Sep 2002
Location: New York, NY
Status: Offline
Reply With Quote
Feb 11, 2007, 01:01 PM
 
KeyChain can be synced via .Mac.
Vandelay Industries
     
Clinically Insane
Join Date: Mar 2001
Location: yes
Status: Offline
Reply With Quote
Feb 11, 2007, 02:13 PM
 
Originally Posted by Art Vandelay View Post
KeyChain can be synced via .Mac.

I wouldn't though. All of these poor security decisions on Apple's part will surely bite them in the ass someday, if not already.
     
Clinically Insane
Join Date: Mar 2001
Location: yes
Status: Offline
Reply With Quote
Feb 11, 2007, 02:20 PM
 
I remember a time where .Mac IMAP and/or SMTP auth was not encrypted, I remember when iDisk/Backup password exchanges over WebDAV were not encrypted (they still may not be).

If you are not going to offer a tremendous amount of enticing features at the price point in which .Mac is offered, I expect what they do offer to be secure.

.Mac is lame.
     
Forum Regular
Join Date: Jan 2007
Location: ZZ9 Plural Z Alpha
Status: Offline
Reply With Quote
Feb 12, 2007, 06:05 AM
 
Use Keychain.

As long as you use a strong master password it makes no difference that .Mac transfers aren't secure since the contents of the keychain are 128 bit triple DES encrypted. If that's still not good enough for you ( ) then you can further protect yourself by creating a new keychain (ie. not 'login') and saving it on a password-protected encrypted disk image which you can then save on your iDisk and open every time you need to unlock your keychain.

Personally I have a keychain called 'USB' which I keep on my (drum roll) USB drive! Macs I use regularly are set up to recognise this keychain automatically, any other Mac I just plug in and double click on the USB.keychain file to access my passwords. Once the USB drive is unplugged so is the keychain. I use keychain to store passwords (obviously), but also other sensitive information such as my credit card details using secure notes.

IMHO, Keychain is one of the most underated features of Mac OS, and one of the main things I miss when I have to use a PC.

Oh and yeah, .Mac is lame.
(Last edited by glypht; Feb 12, 2007 at 10:23 AM. )
     
Junior Member
Join Date: Nov 2002
Location: London
Status: Offline
Reply With Quote
Feb 12, 2007, 06:41 AM
 
Thanks, that's an excellent suggestion, I'll give it a try.

I'm surprised to hear so much criticism of .Mac, though. I find it pretty good. I run four computers in different locations, and I really like the way that all my data, calendars, book marks, addresses, e mail accounts etc are synced automatically. It means I don't have to think about where to find stuff - it's just there when I switch on. I guess if the security is weak, then that's a problem, but the overall functionality is good, in my opinion.
"most people are fools, most authority is malignant, god does not exist and everything is wrong" - Ted Nelson
     
Moderator
Join Date: May 2001
Location: Hilbert space
Status: Offline
Reply With Quote
Feb 12, 2007, 06:58 AM
 
Originally Posted by besson3c View Post
I remember a time where .Mac IMAP and/or SMTP auth was not encrypted, I remember when iDisk/Backup password exchanges over WebDAV were not encrypted (they still may not be).
The passwords in your keychain are encrypted. So even if the file were transmitted in clear text, it's no use since the actual passwords are still encrypted. As long as you don't have the password for the keychain, all of the data is safe.

I think Keychain is the easiest way to go.
I don't suffer from insanity, I enjoy every minute of it.
     
Forum Regular
Join Date: Jan 2007
Location: ZZ9 Plural Z Alpha
Status: Offline
Reply With Quote
Feb 12, 2007, 10:22 AM
 
Originally Posted by taldrich View Post
I'm surprised to hear so much criticism of .Mac, though. I find it pretty good.

Let me clarify: .Mac is a very well-integrated and useful service.

The $99 price tag is lame.

I was a .Mac user for two years after iTools-gate, the value for money steadily declined to the point where the few features I couldn't get elsewhere for free weren't useful enough by themselves to warrant the price tag. But that's just me; whatever floats your boat.

Maybe when 10.5 comes out there'll be some new compelling reasons to get .Mac, or maybe they'll increase the storage, reduce the price, allow monthly payments, add PHP support, or any number of other improvements which would make it better value (for me), in which case I'll review my position.

Or maybe Google will bring out Gdisk, IMAP for Gmail, Browser Sync for Safari and a means of two way calendar syncing with iCal. Who knows....
(Last edited by glypht; Feb 12, 2007 at 10:34 AM. )
     
   
Thread Tools
Forum Links
Forum Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Top
Privacy Policy
All times are GMT -5. The time now is 08:36 AM.
All contents of these forums © 1995-2011 MacNN. All rights reserved.
Branding + Design: www.gesamtbild.com
vBulletin v.3.8.7 © 2000-2011, Jelsoft Enterprises Ltd., Content Relevant URLs by vBSEO 3.3.2