Originally Posted By: ireckon
Off topic sorta...

I really hate admitting this, but password protection may be a situation where good ol' pen and paper is superior. That is, if you store the paper in one safe. At that point, the only way to get the password (from you) is by getting into that safe or into your brain. You leave no exposure via your lost computers, cloud computing, etc.

Even better is store passwords on an encrypted computer who's single purpose in life is to store your passwords, and then lock that encrypted computer in one physical safe. (Storage in only your brain is obviously the highest security, but for me personally that's not an option.)

All the fancy encryption algorithms cannot beat a system where your password is simply not stored on any computer in any way, shape, or form. Of course, your third parties (e.g., bank computers) store passwords somewhere, but you have no control over that storage.

No one stores passwords anymore. Encrytped or otherwise.

What is stored is a one way hash. There is no way to get the password from the hash.

When you enter your password, the password you enter is put thru the hash algorithm and the output compared to the hash stored on the computer system. If the correct password was entered, the hash will be the same.

But there is no way to go backwards from the hash and get the password.
_________________________
Warning - I am not an expert on anything having to do with this forum, but that won't stop me from saying what I think. smile

Bob