Password Paranoia: Possibly Pertinent Pontifications Pertaining (to) Protection

1

I like to browse the front page of Reddit in the morning. Robed in my finest silks, I kick up my heels, lean back, and find out what I should be afraid of this day. Granted it’s not all bad, but a headline about a bombing in France tends to imply more urgency than some Pikachu outfit made for a cat. That said, those sensationalist headlines are the ones I tend towards. The world’s problems don’t go away just because you can ignore them, and doing so just makes it easier to be blindsided.

I opened a headline about a Dropbox database leak.

The blog entry detailed a soft investigation into the validity of a possible Dropbox database leak back in 2012. It was well-written, with the explanation of investigative steps easy enough for most people to understand. While the main takeaway didn’t over-worry me (I’ve changed my Dropbox password a lot since 2012), there was one idea that jumped out: the author recommended using a password manager. This stirred me a bit. I had avoided jumping on the PM train for years, always thinking of it as another vector for hackers to target. Hearing this from someone who works in security for a living had me rethink my stance. A couple hours and a handful of aggregate review articles later, Dashlane found a place on my hard drive.

Password managers are exactly what they sound like: applications that store and manage your passwords. The astute may observe that their web browser of choice already does this fairly well, but accepting it as an adequate solution is folly. The password databases used in these cases are often left with scarce protection, leaving them vulnerable to malicious intent. With a PM like Dashlane, however, this worry becomes a non-issue. Your passwords are now heavily encrypted and only usable on devices that you’ve authorized. By coupling this with a strong password for Dashlane itself, you’re creating a watertight seal for your password list.

Now you may find yourself asking “but Will, this sounds like a huge hassle. Do I actually have to devote headspace to this?” and to that I would reply “…that’s a bit of a boorish question. The security of your personal information is worth the hassle”. Then you’d give a solemn nod and leave because the cashier was done ringing up your groceries. Arriving home, you decide to listen to this sensible stranger, and setup Dashlane posthaste. Unfortunately, you find that it imported all of your web browsers’ stored passwords. You take some time to sort through them and delete the unneeded or outdated ones. You then install the Dashlane plugin for your browsers of choice. Then you notice that…nothing else major is required and you’re using the program as intended. Rejoice! and bask in your newfound status as an exemplar of humanity!

All that nonsense aside, Dashlane has been a rock for me. Even though I’ve only used it as a password manager so far, it actually touts itself as a repository for all your sensitive tidbits. It stores most of the common information you’d use to fill out forms online and consistently auto-populates it in your web browser when needed. But wait, there’s more! It also has areas for storing copies of your photo IDs, online receipts, and payment info.

Wow, this was longer than intended. In the name of keeping your PASSWORD entries secure, though, I can’t recommend a password manager enough. I’ve been happy with Dashlane and don’t feel the need to shop around, but based on what I’ve heard/read, there are a handful you could go with. Give them all a shot and see which one tickles your fancy! You’ll probably have a blast while doing it…