Announcement

Sunday, December 11, 2016

Managing all your passwords from one place

In April this year, my friend Parimal Nagarnaik died after 2 year battle with cancer. At that time I realized how many things we do online now a days. All these websites have a username and password. Usually these usernames and passwords are stored in memory or in browser (e.g firefox/chrome) or some word document. It creates a mess for the family.

Last few days I am searching for a way to manage all the passwords at one place from multiple devices. Also a way to share the passwords with family in case any mishaps. I have found following somewhat practical way.



Keepass : Opensource application for securely storing passwords

First download http://keepass.info/download.html . Keepass is an open source application for managing your passwords. All the passwords are stored in keypass database in an encrypted format. Keepass uses AES/Twofish (two well known cryptographic algorithms with 256 bit key). The main database is encrypted with a key derived from a master password. You have to give the master password to decrypt the database of all other passwords.

How to share Keepass database across devices ?

Now enter all the passwords in Keeepass and save the password database in Google Drive. All your windows devices can share same keepass database. Any changes in one device will be propagated to another device by Google Drive.

Now install KeepassDroid  from Android playstore.                        

Install Google drive app on your phone from app store. Make the keypass database 'available offline'. And then open it directly from Google drive. Google drive will ask 'which app' to be used for opening the file. Select "Keepass Droid" app. Now same google drive keepass database is available to you on your android phone. Any changes/edits you do on phone will be synced to your desktop apps as well.                        

How to share the Keepass database with family members in case of mishap?

You can share the keepass file with your family using the google drive 'share' feature. This way family will have access to your passwords if required.

Gmail has 'inactive account manager' feature. "Inactive account manager" sends a message to google email accounts that you specific and give them access to your gmail. You can specify the message to be sent to these account. Include your 'keepass' master password in this message.

Keepass apps are ported to iOS/iPhone as well. Search for MyKeePass or SyncPass on iPhone appstore.                        

Keepass plugins are available for Firefox, Chrome, IE for managing all your internet password/logins directly from browser. You can get the links for various plugins from http://keepass.info/plugins.html

6 comments:

Raghu said...

Good information. Worth sharing with others as well

Unknown said...

This is a very good article. I use the google shared calendar which is shared by all family members and configured on their respective phones. The shared calendar has notifications set for all life insurance policies, particularly maturity date, premium due date, passport expiry dates, annual housing maintenance charges etc.

This way even if I am travelling, I can set events & the address on a family calendar which everyone can see and get notified about. Apart from the notification on phone and email, one can set the multiple notifications and duration.

Shailesh Newaskar said...

To add to my previous comment - adding a Google spread sheet with all the bank a/c #, demat #, nominee details etc, incase of an unfortunate event, this will help the family.

Bala Muthusamy said...

Very sad to hear about Parimal. I worked with him for almost 2 years, great person ! Thanks for sharing the update on password management.

kasodkar said...

What is the guruntee that subjected application do not misuse our passwords

Uday

Nitin Bhide said...

Uday, Keepass is NOT a internet based application. It is a essentially a 'desktop application' So the password is stored on your laptop or phone. Obviously Keepass cannot misuse your password.