Password management finally possible
by Joel Spolsky
Thursday, September 11, 2008
Now that DropBox is shipping, there's finally a good way to manage all your passwords. This system works no matter how many computers you use regularly; it works with Mac, Windows, and Linux; it's secure; it doesn't expose your passwords to any internet site (whether or not you trust it); it generates highly secure, random passwords for each and every site, it's fairly easy to use once you have it all set up, it maintains an automatic backup of your password file online, and it's free.
- Sign up for DropBox (note unfortunate URL: getdropbox.com). This gives you a folder on your computer that can, magically, be synchronized onto every computer you use. Whenever you change a file on one computer, the change is automatically propagated to your other computers.
- On all your Windows computers, install PasswordSafe. This is a little program that maintains an encrypted password file for you for all the sites you visit regularly. It will even generate long, complicated passwords full of special characters. The file itself is encrypted... if someone gets their hands on it, it's worthless without the master password you created for it. Store the file in your DropBox folder, of course.
- On all your Macintosh and Linux computers, install Password Gorilla. This works just like PasswordSafe and uses the same file format.
That's really all there is to it. There is one optional step:
- Log on to all your bank accounts and change that "abcd" password to some long 16 digit, unique, secure password that PasswordSafe makes up for you.

College students: my company has paid
summer internships in
New York City,
including free housing, free lunch, and the chance to develop software people
will really use, with great mentors
on interesting projects. Don't miss this chance of a lifetime. We only have
a few spaces and they always go fast, so apply today.
Want to know more?
You’re reading Joel on Software, stuffed
with years and years of completely raving mad articles about software development, managing
software teams, designing user interfaces, running successful software companies,
and rubber duckies.
About the author.
I’m Joel Spolsky,
founder of Fog Creek Software,
a New York company that proves that
you can treat programmers well and still be highly profitable.
Programmers get private offices, free lunch, and work 40
hours a week. Customers only pay for software if they’re delighted.
We make FogBugz, an
enlightened project management system designed to help great teams develop brilliant
software, and Fog Creek Copilot, which makes
remote desktop access easy.
© 2000-2010 Joel Spolsky