[Passwordsafe-users] Random order passwords
Popular easy-to-use and secure password manager
Brought to you by:
ronys
|
From: David E. <da...@fr...> - 2009-02-19 10:59:21
|
[Apologies if this has been said before, only just subscribed...]
I'm finding an increasing number of sites (especially finance related
ones) where the authentication is some subset of the characters from the
password, often in a random order. Sometimes you type into these (and in
some cases it moves automatically tot he next field, and sometimes you
have to tab or click to move on), sometimes select the digit from a pop
up menu.
These are fiendish to use from Password Safe (not its fault, of course:
unless you have it memorised, its hard from anywhere), and you have to
reveal the password on the screen and count along it to get the
character you want, which isn't ideal.
Secondly, most such sites want further authentication, either on the
same screen or a subsequent one. Often the answer is in response to a
randomly chose one of number of questions, so in a sense it is like the
random digits - you need to be able to say which password depending on
what the site is asking for.
It would be really nice if Password Safe supported this. Here's my
suggestion of something which would be quick to work through to satisfy
what the site is asking for...
Firstly, a variation on autotype, where it pops up a dialog into which
you type e.g. "354<enter>" if the site is demanding the third fifth and
fourth characters. The autotype pattern would also need to accommodate
an option for selecting the character from a menu as well as typing it.
Secondly, maybe an "extended autotype" could offer the questions on a
menu and supply the answers. Obviously the pattern would need to cover
this too, and it needs the entry to store an arbitrary number of
passwords along with identifying phrases (grouped, in the sense that the
site will ask for only one password in any group, but wants one from
each group).
So, for example, say the site asks for digits 3, 5 and 4 plus "which
school did you first attend", you can click the "extended autotype"
button, type
354<tab><down arrow.../select off pop up with mouse><enter>
and it will enter the required info (down arrow is the standard k/b
shortcut for selecting from the pop up and you do it until you see the
question being asked; actually typing the first letter would work too if
its a standard windows widget).
In summary:
- multiple passwords with user supplied identifiers, in groups
- extended autotype where you choose the combination of passwords (in an
efficient way)
- autotype patterns to support these.
Thanks for listening.
David
|