[ how can i make homemade viagra | cheap viagra order online | herbal risk viagra | cialis levitra sales viagra | index | buy viagra online | herbal vigor | h h order script sec viagra | viagra cost | viagra users | how viagra works | cialis professional no prescription | cialis no prescription | chinese herbal viagra | alternative drug new viagra | viagra gel | natural viagra substitutes | search herbal viagra | discount brand name cialis | viagra | viagra canada | viagra online shop | alternate uses for viagra | cheepest cialis | indian viagra | viagra alternative | problems with viagra | viagra tablet | cialis soft tabs 100 mg | viagra stores | book buy guest sign viagra | viagra online kaufen | cheapest online viagra | alternative to viagra | new drug for women viagra | cialis dose | viagra buy now pay later | viagra stamina | generic viagra | 50 mg cialis dose | cheap viagra | generic drug for viagra | get viagra fast | where to purchase viagra | viagra canadian pharmacy dosage | viagra sales in canada | levitra versus viagra | cialis generic viagra | keeping a hardon | cialis no rx | viagra information | lowest cost generic viagra | buy porn viagra | generic viagra pay pal ]

Welcome! I am Jason Nguyen, a graduate student in ethnomusicology at Indiana University, Bloomington, and this blog is where I make observations about music, culture, and academic life.

Clipperz and Other Password Management Options

Clipperz LogoIf you’ve kept up with web news, then you might have heard about the hack of the Gawker website, which exposed a ton of user’s password information to unsavory elements.  Such an isolated incident wouldn’t be a big deal–except people tend to use the same password everywhere.  We’ve all done it.  You might be using the same password for your sensitive email as your Facebook.  It’s convenient, and with so many web services and applications to work with, it is impractical to have a unique one for each site.  On top of that, those folks working on corporate or otherwise sensitive sites might be used to changing your password every month or so.  How to be secure while not creating a hassle?

Clipperz seems to be a pretty good answer for me, and I’ve just spent a few hours today transferring to it from my previous strategy (a combination of the SuperGenPass bookmarklet and a great piece of software called KeePass).  A quick word about those two before I move on (feel free to skip on to the main event though):

  • SuperGenPass: is a bookmarklet that generates a unique password with a basic algorithm: master password + domain name –> generated password.  Example: I go to gmail.com, type my username and a master password, click the SuperGenPass bookmarklet and it replaces the master password with the generated password.  Cool.  The problem is that my employer asks me to periodically change my password, and SuperGenPass has no way to manage that.  I could continuously think of new master passwords, but that defeats the purpose.
  • KeePass: A program that you install that basically holds all your passwords, encrypted by a single master password.  There are some automation options in terms of browser auto-fills and whatnot, but the main weakness is that the database/program is either local or has to be carried around on a USB stick or something.  I used it happily for years and it served me well, but it’s kinda clunky.

So enter Clipperz.  It uses a pretty unique method of storing information that uses Javascript to the max.  You see, they never transmit an unencrypted version of your passwords.  Instead, they encrypt using a master password, then they store THAT. Decryption happens totally on YOUR side, maintaining security.  (I’m totally having to stop myself from getting dorkier).

Clipperz Screen Shot

Click for full-sized screenshot

On top of that, the program has an awesome way of creating one-click links that allow you to automatically log into a site by clicking on a link within Clipperz.  Also, because you don’t have to remember them, you can also make it auto-generate obscene passwords using numbers and symbols, making dictionary attacks difficult.

In short, it’s an online service, but helps ease my mind on the fact that it’s an online service by doing all of the heavy cryptography on the client side.  All it does on the server side is store a bunch of encrypted data that can only be touched by somebody who knows both the username and master password (which needs to be strong, but that goes without saying).  It also lets you download a read-only version of your password library for local use in case their site ever went down or something.  Finally, there are extensions that integrate it with most major browsers.  So again, check it out:


5 comments to Clipperz and Other Password Management Options

Leave a Reply




You can use these HTML tags

<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>