Thread: Protect passwords

These days it seems that just about every website - whether it's a shop, email service or even a search engine - requires a usemame and password. For the best security it's important to use a different password for each one but this can lead to another problem: forgetting passwords. With so many different login details to memorise, many of us have to reach regularly for the 'forgotten password' link.

The best solution is to make.use of a tool called a password manager. This runs on your computer and stores all the usemames and passwords required for every website, hiding them all behind a single password that you need to remember. In this feature we'll explain how to use one.

A game of risk
With dozens of web sites requiring a password, many of us resort to using the same password for many sites. However, doing this can be a significant security risk. If hackers or a rogue employee steal your credentials from one site - an email service, perhaps - they could use them to make purchases from onlille stores, or even log into your bank account. To avoid this risk you should have a unique usemame and password for every site you've signed up to on the web.

The problem with this, of course, is remembering them all. For this reason, several tools have been created to do the job for you. A password manager is a program that stores all your passwords away. It can be accessed by one single login so you only need to remember that one. Many such programs are available, including Keywallet (KeyWallet - Free Password Manager) and Passpack. In this article, however, we'll explain how to use Keepass, a free and opensource password manager.



Getting started
The installation file to a convenient location the Windows desktop is normally suitable. Once the file has been downloaded, double click it to begin the installation process. The first screen will ask you to choose a language; pick one then work through the rest of the wizard. The final screen gives the option to launch the program; either choose this or run it from the Start menu.

Once the program is running create a Keepass database by choosing New from the File menu. A dialogue box will prompt you for a master password. This is the password you will use to access Keepass, and so to the rest of your passwords.

This has two implications. First, it should be as strong a password as possible: use numbers, letters and symbols and avoid obvious words, phrases or family names. Hackers use software that attempts to 'guess' passwords by speedily submitting every word in the dictionary to the site. As you type your password a meter indicates how safe it is. orange is weak (which means it could be guessed), while green indicates a strong password. The best passwords use a mixture of symbols, letters and numbers to represent a familiar word, such as 'Password'. Second, it's vital that you are able to remember this password, as if you Cutget it all the others
will be lost.

Once you have entered your password, click the OK box. Re-enter it when asked and click OK again. Once this is done, Keepass will generate a blank database ready to hold all your passwords. Before going any further, click the Save button and save this file somewhere memorable on your computer.