Recently, we took a look at some of the top password managers available to find the right one for our unique needs.
Updated 8 December 2017 v1.0
Disclaimer : we are not affiliated to any of these Companies, this article is 100 % our own findings and there is no affiliate marketing in place through the links provided below for your convenience.
These days, everyone needs a password for everything. And we at Love4aviation are certainly no exception. We are a marketing and import/export company with a global network that is growing to 200 agents worldwide, and we often need to securely store and share sensitive passwords.
Disclaimer : we are not affiliated to any of these Companies, this article is 100 % our own findings and there is no affiliate marketing in place through the links provided below for your convenience. Apps are listed in alphabetical order.
Security:
Accessibility:
1Password is a password manager for individuals, families and businesses with lots of classic features and a few unique ones.
1Password-Pros:
1Password-Cons:
1Password-Screenshots:
Bitwarden is an open source password manager that comes with limited features compared to other leading password managers.
Bitwarden-Pros:
Bitwarden-Cons:
Bitwarden-Screenshots:
According to the Wall Street Journal, “Neither Dashlane nor a hacker (or government agency) … could access your data without knowing your master password”. This is NOT true (note 1).
Dashlane-Pros:
Dashlane-Cons:
Dashlane-Screenshots:
Zero-knowledge, cloud-based password manager. Encryptr keeps it simple. It has three types of data it can store. Passwords, Credit Card numbers and general key/value pairs. It can easily be expanded to include other default entry types. See our article dedicated to
Encryptr: [Example cases where Encryptr can be used] (https://medium.com/@Love4aviation/encryptr-example-cases-where-encryptr-can-be-used-4d0abb800706)
Encryptr-Pros:
Encryptr-Cons:
Encryptr-Screenshots:
Keeper-Cons:
Keeper-Screenshots:
Lastpass is a user friendly password manger that has free and extremely affordably price options. The company boasts strong encryption algorithms and a password manager that is accessible through all the major browsers, and on apps from all the major app stores.
Lastpass-Pros:
Lastpass-Cons:
Lastpass-Screenshots:
A relatively new password manager with lots of advanced features but some basic vulnerabilities.
Myki-Pros:
Myki-Cons:
Myki-Screenshots:
PassworkMe is a password manager designed specifically for teams in companies and startups. It is hosted in the Netherlands.
PassworkMe-Pros:
PassworkMe-Cons:
PassworkMe-Screenshots:
Roboform claims to be the world’s top password manager, and it was the second choice for our organization. Here’s why:
Roboform-Pros:
Roboform-Cons:
Roboform-Screenshots:
Safe in cloud is another top password manager that is simple user friendly and available on the major platforms and devices.
SafeInCloud-Pros:
SafeInCloud-Cons:
SafeInCloud-Screenshots:
Sticky Password is a good password management solution for personal use. We would not recommend it for teams, especially those working in high risk countries. Sticky Password is designed for personal usage however in several months they plan to introduce a new sharing feature which will allow to share selected accounts with other Sticky Password users. This feature will make the app suitable also for working teams.
StickyPassword-Pros:
StickyPassword-Cons:
StickyPassword-Screenshots:
SuperGenPass is a different kind of password solution. Instead of storing your passwords locally or online — where they are vulnerable to theft and data loss — SuperGenPass uses a hash algorithm to transform a master password into unique, complex passwords for the Web sites you visit.
SuperGenPass-Pros:
SuperGenPass-Cons:
SuperGenPass-Screenshots:
ZOHO is a website that offers a variety of services that cater to the online needs of businesses. But we haven’t tried all their services. What we did try is their password manager, and it was ultimately the one we chose; one of the key reasons being that the ZOHO Vault does not store passwords locally on devices or browsers. Which makes passwords stored on ZOHO’s password manager invulnerable to theft as well to brute force attacks.
Zoho-Pros:
Zoho-Cons:
Zoho-Screenshots:
(1) There are specific software designed to crack these password managers, for example Elcomsoft: https://blog.elcomsoft.com/2017/08/one-password-to-rule-them-all-breaking-into-1password-keepass-lastpass-and-dashlane/ From there only the following providers are secured: Bitwarden, Keeper, PassworkMe, Supergenpass, Zoho.
(2) Police, prosecutors etc. Their crimes are “legal” since they’ve corrupted state institutions. They are the most dangerous sort of criminals, to an individual or to a country. If they’ve done something illegal, they can cover it up any ways they like. They can steal your devices under false suspicion charges. They can have access to your SMS, emails, meaning a recovery option is often an easy attack possibility for them. That’s why you should always use encryption software, encrypt your devices, and buy hardware outside the country you operate.
(3) Open source doesn’t guarantee someone has actually taken the time to audit the code for backdoors or weaknesses, but it shows a will to be transparent.
(4) Access to passwords on a variety of devices, and provisions to allow the sharing of specific passwords with agents irrespective of their locations. Must be accessible from iOS, Android, Windows, Linux and Mac desktops. We don’t do Windows phones or Blackberry because it would restrict so much the list, it’s almost impossible to find a solution.
(5) Zero knowledge encryption means key must be stored on the user’s device otherwise it’s not protected against state-sponsored criminals. Of course, this doesn’t mean they couldn’t give the government plain text messages — just that it would require them to actively attack the user in order steal the required password.
(6) When you login to Zoho Vault extension all the secrets will be temporarily stored in an encrypted format within the browser extension itself. When you click on the secret to view the secret details, edit the secret and click the “Show” button to view passwords the secret details will be decrypted using the extension’s passphrase and are revealed in plain text. The temporarily stored secrets (encrypted secret data) in the extension will be cleared when you logout from the Zoho Vault and when the passphrase is cleared after timeout. Zoho Vault browser extension also has the offline access feature, which also uses the passphrase to decrypt. In the offline mode the data will not be deleted even when the passphrase is cleared. This is because, there won’t be two-way connection between Zoho Vault servers during offline mode to fetch the secrets. The offline mode can be managed by the administrator in the fine-grained control.
All these products were tested and reviewed by Florjan Llapi, Certified Ethical Hacker and System administrator.
