Spolsky's cross-platform password management method
Joel Spolsky's name is well known and highly respected in the software community. When he talks, people listen. So it was with a bit of interest that I noted his blog post about his truly cross-platform password management method. Joel uses the recently-graduated-from-beta DropBox on each of his Windows, Mac, and Linux machines to share files amongst them. He then uses Password Safe on his Windows machine, and Password Gorilla on his Mac and Linux machines, since it is compatible with Password Safe files. He stores the encrypted password file in his DropBox folder, making it available on every machine, and even better instantly synchronized on every machine.
This looks like a slick approach to an age-old problem, and it's great to see an accomplished developer hacking together a useful approach out of existing tools rather than feeling the need to go to the drawing board and write their own solution.












Comments
9
Subscribe to commentsLeeHSep 22nd 2008 10:29AM
I have lots of respect for Joel Spolsky, but I'm not sure that I'd be so keen to follow his example and put my PasswordSafe file on a web-based application. If I did, I'd make sure that BOTH my DropBox account and the PasswordSafe file have VERY strong passwords: see http://www.securiteam.com/windowsntfocus/6C0022AEVQ.html
Danny StewartSep 22nd 2008 10:35AM
According to that page, the vulnerability only affects PasswordSafe 1.x and 2.x. The current version is 3.14.
Jash SayaniSep 22nd 2008 11:18AM
I totally agree. Why would anyone just save all the passwords on a "hackable" file and upload it for the masses !?!?!?
Jonathan HarfordSep 22nd 2008 10:32AM
I use the exact same method, except I use Windows/Mac-only FolderShare (https://www.foldershare.com/) and KeePass (http://keepass.info/).
Mr. Spolsky's choices look like they might indeed be superior.
mxxconSep 22nd 2008 11:51AM
I'm using KeePass v2 with KeePassSync plugin with www.digitalbucket.net that does exactly the same thing.
PS_4Sep 22nd 2008 6:40PM
I use paper. Believe it or not, it works.
Joe SiegristSep 23rd 2008 6:48AM
You could do this.... Or you could do yourself a favor and do it right by using LastPass.com -- You get all the benefits Joel lays out here (cross platform, locally encrypted passwords, easy syncing via sending your encrypted data to a server) plus tons of other features with LastPass: Browser plugin for IE/Firefox, website access, convenient password generation, no copy and pasting, automatic form fill, import/export from and to legacy password managers, and more.
AalaapSep 26th 2008 1:42AM
I use Hashapass. No software to install, no cross-platform trouble, no data stored in the cloud that could be compromised.
DaveNov 16th 2008 10:32PM
Check out LastPass
https://lastpass.com
It looks like a much better cross platform solution.
I found out about it here: http://ubuntuforums.org/showthread.php?t=202896&goto=newpost