Keychain password management?

By Murray Bourne, 08 May 2007

In a recent newsletter, Elliott Masie railed against "password craziness".

No More Passwords - Time for a Keychain!
It is time for us to stop the password craziness. Not only is it hard to remember your dozens of passwords, it is also not very secure. A modest alternative is to use a plug in USB key that would validate who we are at that computer. The key could add biometric validation such as a fingerprint or could have a one instance password. The fewer passwords that are sent in the open space of the internet the better and this could go a long way in reducing spam and scams.

Elliott's idea is not new and possible right now.

Recently, banks in Singapore have required customers to use "2FA" (2-factor authentication) for Internet transactions. For one bank, they send me an SMS message with a code number which adds another password, but I don;t need to remember it.

For the other bank, they sent me a small gizmo (about the size of a thumb drive) and I need to obtain a number from that device and input it after the normal login to the bank's site. (I'm still thinking about how this works. Presumably there are a set of pre-defined numbers that appear randomly on the device and they need to match what the bank's numbers are.)

Either method, would help to reduce the requirement of passwords for every site we ever visit.

I'm so sick of the plethora of passwords I have to remember - all in different formats. We often cannot use the same one more than once (yeah I know, you aren't supposed to anyway...).

See the 2 Comments below.

2 Comments on “Keychain password management?”

  1. Jacky says:

    maybe OpenID is another alternative.

  2. Murray says:

    Thanks, Jacky. OpenID> is what Dick Hardt of Sxip Identity was talking about in the link in my previous post.

Leave a comment

Comment Preview

HTML: You can use simple tags like <b>, <a href="...">, etc.

To enter math, you can can either:

  1. Use simple calculator-like input in the following format (surround your math in backticks, or qq on tablet or phone):
    `a^2 = sqrt(b^2 + c^2)`
    (See more on ASCIIMath syntax); or
  2. Use simple LaTeX in the following format. Surround your math with \( and \).
    \( \int g dx = \sqrt{\frac{a}{b}} \)
    (This is standard simple LaTeX.)

NOTE: You can't mix both types of math entry in your comment.

Search IntMath, blog and Forum