Tag: password vault

April 26, 2022 – Post Myki Era

On March 3, 2022 I wrote about how I hated technology. My password manager was being discontinued April 10. I have been ‘Riding Dirty’ as they say. It has been working for the last couple of weeks but I have been dearly hoping that I find a new option before my time runs out. I am happy to say that I am trying out BitWarden and I like it so far.

Let us refresh on my requirements for a minute

  • Multi-device support, Windows and Apple IOs definitely, Linux a plus
  • Inexpensive, preferably free
  • Preferred – Browser plug-ins to support auto population
  • New – Ability to import from Myki

I am only into this a couple of days. The import was impeccably easy some of the other functions are more complicated (and more secure). For instance, I am logged out of the password manager each time I close the browser. That is inconvenient but it does have the option to never log out. So, I am going to try it for now and see.

The browser interactions are much better than Myki. If I had one complaint, it was adding new accounts. The interaction was klugey and ineffective. Myki would recognize the account didn’t exist but getting it to work during the first interaction required a mixture of automated and manual efforts to make sure it worked right. Most of the times, I had to log in multiple times to make sure that it was working the way that I wanted.

Myki would often get confused if there were multiple accounts on the same website. With BitWarden, you select the account that you want to auto-populate rather than the software trying to get it. Myki could do it, but you had to manually separate the accounts and set everything up, then you could select the right account.

The browser extensions are like having access to the full program. It makes it convenient to edit and copy while being on the page. The extension is context sensitive an alerts the user that there is an applicable password for the site that is in focus.

I have so far tried it on Windows and IOS and it does seem to work. Syncing seems to be done quickly and I haven’t seen any hiccups. I would say that it is a bit premature to declare everything wonderful. For instance, I have not tried to create a new account yet. Additionally, there are some sites where additional data is required, like a PIN. I don’t know if that will autofill or you will need to have some notes. I will find out.

The one other thing worth pointing out is that this is an open source project. It does concern me a little bit about how it seems so slick and yet it is free. There are some pay options but they really don’t get you that much more. If you have some encryption keys or something, you can store them in BitWarden or you can share passwords within a specific group.

I am saying is free is great, but keep an eye out for how the storage space is paid for. Apparently, there is some tracking of use and the question is what is that used for and where does it go? Yes, all your passwords are encrypted, I feel like that is safe but your movements are not and they are tied to an e-mail account. You might want to have a browser that is not running the extension as your primary browser, just saying.

End Your Programming Routine: I hate to say this and doubts aside, but this might be a blessing in disguise. I really appreciate the smoothness of how the transition has gone and how this seems to just work. I didn’t realize how the nuances of Myki were annoying me but it was better than just having a cloud sheet or a static locker. If this turns out to be a total dud then I will probably let you know. As of right now, it is a recommend for me.

March 9, 2020- Personal Security in the Digital Age

I was first exposed to an open source password manager called KeePass a number of years ago. When I worked in support, I had to have many different accounts at the ready, often on a moments notice. One of the biggest disadvantages was that it was limited to a computer, at least I was smart enough to only put work relevant information on it.

A couple of years ago, I thought that I would want to start using an application like this again. I found one for the phone called MiniKeePass. Early in 2020, the app makers announced that it would no longer be supported by the end of the year. So, I have been ‘riding dirty’ every since.

The problems are, one that there is a lot of information currently saved in MiniKeePass. I also had an old system using Evernote. How to get it out before it is lost forever by an OS update or some other problem. You would be surprised the number of job board logins, etc I have accumulated over the years. According to Apple, it can be backed up, but how do you access the database?

As a result, I am in the search for a good password vault. I need to get these things moved before something happens. I don’t have a lot of requirements, just a few. I don’t want to pay for a service but I am willing to buy an app. I don’t want cloud back-up and potential security vulnerability of someone else storing. Lastly, I would like to be able to access it from multiple devices.

Searching around, I found this app Myki. It is free and it shares across devices. The biggest downside I have found so far is that you have to purchase additional categories. So, for instance I don’t really want to have 400 accounts in one view because I only use four of five routinely.

I am taking a sort of hybrid approach. You can create custom ‘Notes’. I create a note on the category that I want to keep track of. Then I add all the seldomly used accounts under the custom notes. The drawback of such an approach is that you will not get the auto-fill functionality on a webpage. Or said differently, Myki will not fill in account information automatically. I am OK with that, these are accounts that I may never use again.

On a slightly related note, I have been trying out the Brave browser and the Duck-Duck-Go search engine. Post the Capitol riots, I found out that Mozilla is not the patron saint of freedom like I previously thought. One interesting thing about the Brave browser is that you are awarded cryptocurrency for using it. This is one of those things that may never amount to much but there is no harm.

I have known about Duck-Duck-Go for years. This is a search engine that values privacy. So far, I have been happy but I have heard that it is not quite as diligent as Google. I guess we will see.

So, those are some new options for privacy and security. My preference would be to have the same ID and password everywhere, but that is far from secure and a best practice. I am trying to change habits now before something happens.