David E. Ross wrote:
I use the Password Manager that is inherent in SeaMonkey. Some of the third-party applications store the user's passwords in the cloud, which I feel is quite risky. Others, I am just not sure of their integrity and security. Since I have to trust SeaMonkey to handle logins with both security and integrity, I must then trust SeaMonkey to store my passwords.
Doesn't really address the OP's question. He's concerned by several posts we've seen here about SM forgetting passwords after recent upgrades. I, too, would be greatly inconvenienced if SM forgot all those nuisance logins that I entrust to it.
As much as I trust SeaMonkey, I still use a lengthy pass-phrase (not merely a password) as my master password. I also periodically change the individual passwords for the Web sites of my financial accounts and certain other critical Web sites.
As a policy, I don't save logins and passwords for financial institutions in SM or anywhere else my computer. However, in a separate file with a nonobvious name and location, I do save fragments or clues to those logins and passwords along with a slew of other unrelated data.
So for a simple example (this isn't a real case), for one of my banks I may save the fragment "Yankees," which reminds me to add the fragment "rule!!" when I enter it in the website. For another example (again, not a real case), I may save "hIOdnV7QT9A_aJvHnZ2dnUU7" (I grabbed this just now from your message id) and remember that the login is "hIOdnV7QT9A" (the first part) and the password is "_aJvHnZ2dnUU7" (the second part). Nothing in the file mentions the institutions or their websites, so it's not obvious to anyone else which parts of the mass of data go with what. And since what is there is incomplete (the rest being saved in wetware), cracking it won't help without the other part.
There are many ways of saving useful reminders (not complete logins or passwords) without assuming unreasonable risks.
-- War doesn't determine who's right, just who's left. -- Paul B. Gallagher _______________________________________________ support-seamonkey mailing list support-seamonkey@lists.mozilla.org https://lists.mozilla.org/listinfo/support-seamonkey
