[ viagra movies | viagra available in india | buy generic viagra from india | purchase cialis | super viagra | viagra sales | cheapest viagra in the world | viagra dosage | viagra herb alternative | viagra order | canada viagra pharmacies scam | how to get viagra no prescription | zocor alternative viagra | cialis no prescription | viagra in ireland | how much does viagra cost | discount lowest price viagra | pfizer mexico viagra | viagra buy in uk online | viagra cost | viagra prescription for woman | cheapest online viagra | where can i purchase cialis | viagra tablets no prescription | cheap viagra uk | viagra cartoons | viagra blog | cialis canadian pharmacy | order usa viagra online | cialis for woman | online url viagra | canadian viagra | cialis alternatives | get viagra fast | viagra st | female viagra | gel tab viagra | index | cialis at real low prices | death by viagra | brand name cialis overnight | where to purchase viagra | how to get viagra no prescription | how strong is 5 mg of cialis | canadian generic cialis | map of france with cialis | express viagra delivery | indian viagra | pfizer female viagra | best cialis price | when do i use cialis | generic viagra in canada | new drug for women viagra | viagra fast ]

Welcome! I am Jason Nguyen, a graduate student in ethnomusicology at Indiana University, Bloomington, and this blog is where I make observations about music, culture, and academic life.

Clipperz and Other Password Management Options

Clipperz LogoIf you’ve kept up with web news, then you might have heard about the hack of the Gawker website, which exposed a ton of user’s password information to unsavory elements.  Such an isolated incident wouldn’t be a big deal–except people tend to use the same password everywhere.  We’ve all done it.  You might be using the same password for your sensitive email as your Facebook.  It’s convenient, and with so many web services and applications to work with, it is impractical to have a unique one for each site.  On top of that, those folks working on corporate or otherwise sensitive sites might be used to changing your password every month or so.  How to be secure while not creating a hassle?

Clipperz seems to be a pretty good answer for me, and I’ve just spent a few hours today transferring to it from my previous strategy (a combination of the SuperGenPass bookmarklet and a great piece of software called KeePass).  A quick word about those two before I move on (feel free to skip on to the main event though):

  • SuperGenPass: is a bookmarklet that generates a unique password with a basic algorithm: master password + domain name –> generated password.  Example: I go to gmail.com, type my username and a master password, click the SuperGenPass bookmarklet and it replaces the master password with the generated password.  Cool.  The problem is that my employer asks me to periodically change my password, and SuperGenPass has no way to manage that.  I could continuously think of new master passwords, but that defeats the purpose.
  • KeePass: A program that you install that basically holds all your passwords, encrypted by a single master password.  There are some automation options in terms of browser auto-fills and whatnot, but the main weakness is that the database/program is either local or has to be carried around on a USB stick or something.  I used it happily for years and it served me well, but it’s kinda clunky.

So enter Clipperz.  It uses a pretty unique method of storing information that uses Javascript to the max.  You see, they never transmit an unencrypted version of your passwords.  Instead, they encrypt using a master password, then they store THAT. Decryption happens totally on YOUR side, maintaining security.  (I’m totally having to stop myself from getting dorkier).

Clipperz Screen Shot

Click for full-sized screenshot

On top of that, the program has an awesome way of creating one-click links that allow you to automatically log into a site by clicking on a link within Clipperz.  Also, because you don’t have to remember them, you can also make it auto-generate obscene passwords using numbers and symbols, making dictionary attacks difficult.

In short, it’s an online service, but helps ease my mind on the fact that it’s an online service by doing all of the heavy cryptography on the client side.  All it does on the server side is store a bunch of encrypted data that can only be touched by somebody who knows both the username and master password (which needs to be strong, but that goes without saying).  It also lets you download a read-only version of your password library for local use in case their site ever went down or something.  Finally, there are extensions that integrate it with most major browsers.  So again, check it out:


6 comments to Clipperz and Other Password Management Options

Leave a Reply




You can use these HTML tags

<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>