本週早些時候，我們請您分享管理和組織密碼的技巧。現在我們回到重點工具，技巧和技巧，你用你的密碼和網際網路安全。

萊納斯·博曼攝。

週三我們的讀者提問得到了大量的回覆；你們記錄了數百條回覆。這些回答涵蓋了你最喜歡的軟體，你用來生成沒有軟體的密碼技巧，等等。讓我們先看看你用來管理鑰匙圈的流行應用程式。

上道、下道和各種尺寸的道

大多數人都在使用某種密碼管理器來管理和組織密碼。使用應用程式是一個很好的方法來跟蹤你的密碼，因為它從根本上消除了你的大腦從整個方程，並允許你分配隨機生成的密碼，以每一個登入你使用。很少有人能記住200次登入，而這些登入都是隨機的，就像“&xv$v1oGkuXjs*OBfS79”。以下應用程式按它們在您的評論中出現的次數排序。

LastPass:LastPass是一個基於web的解決方案，作為一個整體，讀者絕對喜歡它。它使良好的密碼管理非常容易。你們中有不少人評論說，在嘗試LastPass之前，你是如何**的，直到你最終嘗試了一下並愛上了它（這反映了我自己堅持使用LastPass的經歷，但當我最終開始使用它時，卻發現它完全棒極了）。Gouthaman強調了LastPass的一個優點：

All my passwords are offered automatically by LastPass when creating an account and they pop-up whenever I need to login. This means that I use a different password for every single web service and yeah, I don’t even remember my Twitter/Facebook/Google password, but my LastPass does!

Kaylin指出，切換到LastPass已經徹底改變了她的密碼安全方法：

LastPass Premium remembers passwords for me. Before that, I had one or two major passwords that I used for most sites. Then I came to realize that method is risky. My LastPass score was only 13 when I started using it, and now I have a much better score because I have changed my habits, thanks to LastPass.

出於好奇，Kaylin指的是LastPass安全挑戰。LastPass使用者可以接受這個挑戰，對您的密碼進行本地和安全分析，看看您的密碼實踐有多好。它會掃描你的密碼庫，檢查你是否使用不同的密碼、多因素身份驗證以及你儲存的密碼數，然後根據這些來分配分數。

LastPass提供免費服務和每年12美元的優質服務。您可以在這裡比較免費和高階服務。

KeePass：你們中的許多人只是對將密碼金鑰環同步到雲端的想法感到不舒服，不管加密和測試的機制有多好。這排除了LastPass的可能性，但使您成為KeePass的主要候選人，KeePass是一個擁有大量追隨者的開源密碼管理器。KeePass提供了幾乎所有與LastPass隨機密碼生成相同的基本功能，基於類別的組織只需要稍微麻煩一點就可以將內容同步到瀏覽器。你們克服了KeePass的限制，進行了各種各樣的破解和修復。Dave是眾多使用Dropbox在機器之間同步KeePass資料庫的讀者之一：

KeePass, on Dropbox for access by my several machines. On crucial sites (banking, credit cards, &c.) I use 20+ character gobbledygook passwords generated by KeePass. On many forum-type sites I use the same old user name and password, since the worst that could happen is that someone could post something in my non-recognizable name.

Doc使用KeePass，並對只使用少數幾個簡單密碼提出了嚴厲的建議：

KeePass Portable on my D: drive, with another copy (program & database) on my USB drive…password protected, of course.

To those that use “1 or 2 or 12 passwords for everything”…just wait until an account is hacked and somebody you thought you could trust is rummaging through your bank account and emails. If you’re that lax in keeping your password secure, you’re probably using your birthday, your middle name, etc. to generate all these passwords…and they’re easily cracked. Use uppercase and lowercase letters, numbers, and some punctuation to generate real random passwords and store them securely! Better yet, change a few of them each week just to be safer. (Just ask Sony how much pain a hacked account can cause!)

Roboform：雖然不像LastPass和KeePass那樣受歡迎，但由於一個動力不足的免費選項和一個價格相當高的商業選項，Roboform仍然擁有強大的追隨者。它既可以是基於web的解決方案，也可以是基於桌面的解決方案。Robbie在這裡提供了一個可靠的服務概述：

Roboform (now known as Roboform Anywhere).

Has the advantage of automatically (and securely) synchronizing your passwords across all your instances (unlimited).

Has a very nice configurable password generator feature for times when you want maximum security or when you don’t feel like thinking of a new password.

Also lets you attach notes to each login, allowing you to save things like answers to those annoying security questi*** that you’ll never remember the exact answer several years from now.

If you are using someone else’s computer or don’t want to install Roboform on a particular machine, you can look up your username & password on online.roboform.com.

Roboform有三個版本免費，桌面版（30美元）和隨處版（每年20美元，第一年10美元）。你可以在這裡比較版本。

使用你的大腦和模擬解決方案

儘管基於應用程式的解決方案很方便，但有些人更喜歡使用基於記憶體的解決方案或基於模擬的解決方案。不少讀者分享了他們使用心理演算法的技巧。吉姆給出了最詳細的解釋：

[I use] 3 stages: 1) a set of words – sentence, phrase, addresses etc that you can remember – needs to make a string that is at least 50 characters long 2) an algorithm that allows you to get a set of characters from that set of words – such as every ‘n’ characters 3) write down the start point in that string, and the value of ‘n’ that you will use and the number of characters…

And – for those ‘passwords’ that require numeric values the location within the string of the numeric that will be generated from the alpha code in the string – either a=1..i=9, j=10 etc.

And for those that require a non-numeric character there is the characters associated with the number on the keyboard that you get from using the number generator from the string

So – that’s 3 numbers, and optionally – another 1 or 2 numbers. You get to write down a 5 digit code that lets you re-create the passcode, but never write down the source string so no-one else can calculate it. For the number and special character – you decide if the clue number is going to be from the string start, from the startpoint (first number) , or from the end point 1st+2nd*3rd etc.

Once you have the algorithm pick a character to be the Capital letter, the number and the special character. C***istency makes it easy to remember the character selection algorithm/calculation/formula and after a while you won’t even have problems remembering the source string.

Source – string – what names etc. do you pass on the way to work – streets, shops, business names! Avoid bringing the relati*** [such as a spouses name] into it.

雖然他的技術是徹底的，但這肯定比讓密碼管理器為您隨機生成和呼叫密碼要多一些工作。

作為將它們全部記住和數字化儲存的中間環節，你們中的一些人選擇了一個基於紙張的系統。浮木寫道：

As my spouse is not computer literate (read that geek) we keep our passwords in a binder near the computer. It’s not elegant nor geeky, but it works well for us, and if I’m not available someone else that needs in can get there.

Richard將密碼作為方法：

Since 1981, I’ve used index cards and index card file box. Low tech and always handy.

艾德龍走的是老派路線：

I have a composition notebook with all my passwords and save it in a 2 ton safe where my birth certificate and gold are stored.

現在你們中的一些人可能會對在紙上儲存密碼的想法搖頭。然而，現實地說，有人闖入你家竊取你密碼的機率幾乎為零。即使你的家被盜竊了，他們也會在那裡買東西，比如電子產品和珠寶，而不是像盜取你的身份和試圖從你的銀行賬戶裡撈錢這樣的長期騙局。你可以在上一篇文章中閱讀更多關於我們對它的看法寫下你的密碼有什麼問題。

有關您的讀者如何儲存密碼的更多資訊，請務必點選本文原文的冗長評論。有什麼小竅門可以分享嗎？在這裡的評論中發出聲音。