Re: Password keepers

["Shamblin, Quinn" <qrs () BU EDU>]

If you are talking about a personal store of passwords, an application like that (there are others as well that are 
good, both for windows and mac) can work well, but as you point out, you need to keep a backup of that encrypted DB on 
a different systems somewhere and ensure it is being regularly backed up or synced.

If you want to talk about this issue at a larger level, products like Cyber-Ark and their competitors offer some very 
helpful solutions, but obviously at a cost.

Quinn R Shamblin
------------------------------------------------------------------------------------------------
Executive Director of Information Security, Boston University
CISM, CISSP, GCFA, PMP  -  O 617-358-6310  M 617-999-7523

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Slocum, 
Stacy
Sent: Monday, August 27, 2012 10:29 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Password keepers

Hello-

Could anyone share a best practice with regard to the storage and safe keeping of the collection of all system 
passwords?  Is using a keepass type application the best approach?  What about redundancy in the event you can't get to 
the stored list or it is corrupt?

Any advice and/or opinions would be very helpful.

Thanks
Stacy