Web Browser

Sunday, September 1, 2013

Best Password Managers: Top 4 Reviewed Part II


Clipperz is a free, Web-based, open-source password management service that also lets you download a read-only copy of the application and your password data.
It works with any computer capable of running Firefox, Chrome or any other browser that supports JavaScript -- including my iPad running Safari. It also offers a version of the Clipperz Web site that's optimized for mobile phones and other devices with small screens.
Clipperz stores the offline copy of your password data as an encrypted HTML document. The local copy doesn't update automatically, so if you want to keep your offline copy up-to-date you will need to download a fresh one each time you update your database. It saves to a different date-based filename (e.g., clipperz_20100915.html) each day you use it; I purposefully overwrote the same file name each time so that I could open the file using the same Firefox bookmark.
Once you've set up an account, you can open either the online password vault or the local copy of your data using your user name and master password.
Like RoboForm and LastPass, Clipperz initially encrypts password data locally, on your computer, before uploading it to the cloud. Once you set up an account, you can import data (Clipperz supports five formats, including Excel and CSV) or enter your account credentials manually.
Setup involves creating password "cards" that contain the Web site address, log-in name, password and any other required data. Web sites can be grouped into categories.
Clipperz lets you create simple Web password cards you can use to copy user names or passwords to the clipboard and then paste into Web site log-in fields. For each site you need to create bookmarklets to have Clipperz automatically log you in. That takes a little bit of work.
You start by dragging a link from the Clipperz Web site onto your bookmarks toolbar, where it appears as a button. To add a bookmarklet for a new card, you navigate to the target site and click the "Add to Clipperz!" button. A window pops up with code in it that you copy to the clipboard. Then you go to the Clipperz Web site, log in, edit the card and paste the text into the Direct Login field. It doesn't take too long once you get the hang of it, but the process could be much easier.
After that you can automatically log into those Web sites by logging into the Clipperz.com Web site and clicking on the site you want to access from a list. Clipperz loads the Web page in a new browser tab and logs you in automatically.
Clipperz will also work with Portable Firefox or other portable browsers on a USB drive. A Compact Edition, designed to run in the Firefox bookmarks sidebar or Opera's panel, offers read-only access to your online password data. The compact version is somewhat faster because you don't need to navigate to Cipperz.com to log in. However, to change a Web site's log-in credentials or add a new card you'll need to visit the Clipperz Web site.
Clipperz is free and there's nothing to install locally, except to configure bookmarklets. The open-source code is freely available -- if you don't trust them with your data you can always host Clipperz on your own server. But setup and maintenance of your password data is a bit more involved than with LastPass or RoboForm, and locally cached, read-only copies of your data don't update automatically.


The developers of LastPass say they built the product from the ground up to provide access to password data on any device -- and it shows.
Once installed and configured, LastPass is a breeze to use. The application maintains a local copy of your data on any Windows, Mac or Linux machine. A single icon on your browser navigation bar gives you access to all its features.
But as with RoboForm, some setup and configuration details can be a bit involved if you're supporting more than one platform or browser, or want to add two-factor authentication. For example, when I accessed the "download" screen on LastPass.com, the site recommended a download for Firefox -- the browser I was using at the time. But there are separate downloads for each additional browser you want to use with LastPass -- and a total nine different variations of the program you can download for the Mac.
LastPass runs on the iPad and any Windows, Mac or Linux computer via a browser extension for Chrome, Firefox, Internet Explorer and Safari browsers. You click the red LastPass icon on the browser navigation bar to access the account log-in screen and a drop-down list of key features. Once logged in, you can access your database on the LastPass Web site, set up profiles, log into sites, create and access secure notes, or configure some very detailed security settings.
LastPass uses your e-mail address as your user name. Since your user ID is easily guessed, that makes it doubly important that you choose a strong password.
When you visit a Web site that LastPass recognizes, you can configure it to automatically fill in the account credentials and log you in without prompting. There are no buttons to push. Of all of the products reviewed here, LastPass had the most seamless process for automating the log-in process.
Each machine that you use LastPass on has its own encrypted, local copy of the password database, which synchronizes with a master database hosted at the LastPass.com Web site. You can also log into the site directly and view your data from anywhere, without using any browser extensions.
LastPass for the iPad keeps a synchronized copy of your password data. Because it can't integrate with the Safari browser on iOS devices (iPad, iPhone, iPod Touch), the app includes a simple, embedded browser of its own. A list of your passwords appears in one tab. Press on a site name and LastPass launches a new tab, loads the site and logs you in.
Other features include the ability to analyze your existing passwords for weaknesses and an option to automatically delete the passwords stored by your browsers (which are not very secure).
The basic version is free, but if you want to use LastPass with any mobile devices other than the iPad, you'll need LastPass Premium. The $12 annual subscription fee adds support for a variety of popularsmartphone operating systems, including iOS, Android, BlackBerry, Windows Mobile, Palm WebOS and Symbian S60. It also includes access from USB keys that can run portable versions of Chrome, Firefox or Internet Explorer and upgraded support (basic support is via e-mail only).
The portable browser/LastPass combination on a USB key for Windows, Mac OS X or Linux supports a local, synchronized copy of your password data. Using a USB key is good for accessing LastPass data from untrusted machines because you don't need to install LastPass locally and nothing is left behind on the machine when you finish using it. To help thwart key loggers, LastPass lets you create and use one-time passwords; you can use your mouse to click on a virtual "screen keyboard" and enter your master password that way.
The for-pay version also offers two-factor authentication using either a one-time password-generating program called Sesame or a hardware key called YubiKey. If you don't want to spend the 12 bucks, the free version of LastPass comes with a basic two-factor authentication scheme called Grid. I strongly recommend using the two-factor authentication feature on any device that travels outside of your office or home.
Post a Comment