The Password Manager Security Experts Use

Подписаться 272 тыс.

Просмотров 151 тыс.

50% 1

Don’t know how to use a password manager and want to? Watch this FULL tutorial on how to get started!
Using the same password for every account exposes you to big security risks. You end up recycling that same weak password you’ve been using since high school or college!
Companies and websites experience data breaches all the time, meaning that recycled password is probably in some breach list somewhere.You’ve probably heard about people talk about using a password manager at one point in time, but never gave it much thought.
I’m telling you right now you should start now! It’s one of the best ways to secure your digital life. Besides storing passwords, you can also keep other sensitive information like account numbers or security questions in an encrypted database file.
Once you get familiar with a password manager and begin incorporating it in your daily workflow, you’ll never want to go back!
EFF Wordlist: www.eff.org/files/2016/07/18/...
00:00 Introduction
00:51 🔑. KeepassXC
02:00 📀 Installation
03:27 📂 Creating a Database
3:41 🔏. Database Encryption
➡️ AES (Rijndael)
➡️ Twofish
➡️ ChaCha20
➡️ Argon2
05:24 📝. Creating a Strong Master Key
06:55 📤. 2-Factor Tips
07:18 🔧. Configure & Use
10:42 🗝️. Daily Workflow of a Password Manager
11:25 ☁️. Cloud-based Password Managers
SUBSCRIBE for new video updates!
FOLLOW US
✔ Twitter: / cyberspatial_hq
✔ LinkedIn: / cyberspatial
✔ Facebook: / cyberspatial-114464460...
#PasswordManager #KeepassXC #InfoSec

Опубликовано:

26 июл 2024

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист

Посмотреть позже

Комментарии : 202

@cityinthesky1341 2 года назад

I just discovered this channel. Fantastic work! Thank you.

@tears_falling 3 года назад

just discovered ur channel, amazing

@Cyberspatial 3 года назад

tears falling thanks!

@TalsonHacks 3 года назад

Same, I just discovered it today. and he’s amazing!

@Cyberspatial 3 года назад

Talson Abdulla thank you so much!

@dannyfresh6697 2 года назад

This seems very overwhelming but makes so much sense. I personally feel using a service is better for me

@phizlip 2 года назад

this method cant be subpoenaed, does not interact with any cloud that may have a way to decrypt your database, and you can physically back this up in several backups that are onsite or offsite

@matteovicariotto2290 3 года назад

Ur channel is amazing, I'm a man on a mission since I discovered it! I'm watching everything! Keep it going man, Ur great.

@Cyberspatial 3 года назад

Thank you! Sounds like we need to produce them faster!

@HotStunna80 2 года назад

You have awesome content! Keep up the great work! 😀

@jugglelulz 2 года назад

Loved the info and editing style.

@uwo7130 2 года назад

Thanks for covering the ergonomics!

@eksadiss 2 года назад

Thanks for the overview showing me how to use a keyboard and fingerpad.

@Maegop88 Год назад

Wow! Extremely great video and info you shared! Thanks a lot!

@jamesdickerson8645 2 года назад

If you're using a linux system, there's only one password manager that matters and it's probably already on your system. It's called pass. It's literally the simplest password manager and it's so much better than all of that other bloated software you're using. It's entirely from the command line and it's been around forever and is usually a core part of any unix-like distrobution.

@oscardeavila8993 2 года назад

You may just be the best education channel on RU-vid.

@mynameisgladiator1933 2 года назад

Thx for mentioning the risks of keylogging and related security threats. The best manager can't stop that!

@Bond2025 2 года назад

You can have all the security in the World. If a device is compromised, the attacker sees and hears everything before and after it.

@mynameisgladiator1933 2 года назад

@@Bond2025 I have a question, if you have a password manager (I'm using BitWarden) and you copy the password and control-V it into the password box, can a key logger still capture that?

@Ngzims 2 года назад

@@mynameisgladiator1933 Personally I think using copy and paste actually are much more insecure than typing, anything can access to the computer clipboard data even without keylogger or virus in your computer. A keylogger that design to monitor to get the password would definitely have some form or ways to access your copied text.

@thegreenguy8837 3 года назад

This is awesome. Thank you so mutch.

@syedmostak10 3 года назад

The day before yesterday, I discovered your channel & fall in love your content. Just awesome!

@Cyberspatial 3 года назад

Syed Mostak thanks!

@Pianodaddyy 2 года назад

Dude same, 100%

@rajasekharreddy7977 3 года назад

Great content. Love it, man.

@Cyberspatial 3 года назад

Thanks so much :)

@chaitanya5652 3 года назад

Amazing video, Quality and Informative content

@Cyberspatial 3 года назад

Thank you!

@gambojoshua2674 3 года назад

U teaching method is amazing We need more, a full course

@Cyberspatial 3 года назад

Would love to do courses, but it's a huge time investment. Topics are changing so fast as well.

@arjayarjay8856 Год назад

Thanks for making this video.

@naeem8434 3 года назад

Amazing video sir!

@Cyberspatial 3 года назад

Thank you!

@hamzaiqbal7860 3 года назад

Overwhelming But Very useful 👌 Content

@Cyberspatial 3 года назад

Random Creativity thanks! Yeah once you start looking into how to be secure online, you start to realize just how overwhelming it all is. Lots of cyber threats out there. But hopefully as you take it a step at a time it will become more manageable.

@secureitmania 3 года назад

Me: Put a password that I don't know. Then click reset password all the time 😂😂

@SuperWolfkin 2 года назад

This isn't even the video I was trying to watch. But darn if that wasn't an efficient and clear walkthrough. I'm a keePass user and I'm trying to dip my toes into Linux and I've been wondering which flavor to user because running KP in mono looks hideous. I think you just sold me on KeePassXC

@siddheshghag5889 3 года назад

Very useful information.

@Cyberspatial 3 года назад

Glad it was helpful!

@forbiddena7915 3 года назад

I use lastpass cause its simple to setup and stuff, im just starting to learn cyber security and I'm looking into making myself secure as you said in your video

@Cyberspatial 3 года назад

Make sure you turn on 2-factor, preferably with a hardware security key.

@forbiddena7915 3 года назад

@@Cyberspatial what are hardware security keys?

@Cyberspatial 3 года назад

@@forbiddena7915 Yubikey is an example of a hardware security key. Yubico offers a variety of great products for cyber security. www.yubico.com

@misterwinner8459 3 года назад

@@Cyberspatial just Found Your Channel And You are awesome Buddy ❤️❤️ Well What's Different in Keepass And KeepassXC?? Edit: dude If you were a creator from an overpopulated country like mine You would have gained a couple of Million of subs.... I m gonna share this channel among my friends🙂

@Cyberspatial 3 года назад

@@misterwinner8459 KeepassXC is a fork of Keepass that is under more active development with some more features, more support for Mac and Linux. Thanks for sharing! Appreciate the kind words!

@akshaynm 3 года назад

Hello, Many Thanks for the nice tutorial. I just have one different question. Which keyboard you are using? I think it's a wireless mechanical keyboard. But best if you can help with the specific brand and model. Many thanks again 🙂

@DV7Dave 3 года назад

The way you explained checksums and all the basics surrounding setting up KeyPass was mesmerizing. The delivery was so smooth. Made me weak in the knees every time you stared in to that camera of yours, haha! Keep it up!

@Cyberspatial 3 года назад

Thank you!

@shemeansfit3975 3 года назад

this content must be taught in colleges

@Cyberspatial 3 года назад

We think so too! Students must be taught how to secure themselves online.

@simbahunter Год назад

Something I noticed in installing KeepassXC is that they really do not want people to be able to read the End-User License Agreement since the text is soo small in the installer.

@JoaoSilva-gs5jb 3 года назад

OMFG, yeah, the content creation is really good

@Cyberspatial 3 года назад

Thanks!

@ehtishamsarwar8407 3 года назад

I was finding something like this, you did it thanks. By the way I'm an old sub realy love your content.

@Cyberspatial 3 года назад

Hope this helps! Thanks for sticking around!

@Jujo1 3 года назад

Hey do virtual machines work as a fool proof for testing purposes?? I mean I've heard of malwares escaping the VM and creeping into the host itself, I wouldn't be surprised if a 0day vuln was prepared to work it's way around VMs and other stuff? I know this isn't the latest video but I do hope you reply to this!

@abhishekanilkumar1109 3 года назад

You are awesome. I started to binge watch. Great content ❤️

@Cyberspatial 3 года назад

Awesome! Thank you!

@Paruthi.618 Месяц назад

quality content thank you

@ferryfirmansyahputra8070 2 года назад

Great content! Thank you so much. One question but it's not related to the content, may i know what kind of mouse did you use there? It's really interesting

@Jonathan-wo6kf 2 года назад

As someone who isn't very tech savvy, is 1Password an ok option if I use it in conjunction with a Yubico key?

@itzApprenticeSteve 3 года назад

Really enjoying your channel, Will you go over Certs eventually? also what touchpad are you using its really nice

@Cyberspatial 3 года назад

Apple Magic Touchpad 2 Yes would like to do a comprehensive overview of the different certifications out there one day!

@DmitryLubenskiy 9 месяцев назад

Hi, thank you for the video. If exported password database is cross-platform and I can open it in different OS? And why I might prefer KeePassXC over KeePassX?

@SagaraUrz 2 года назад

I have thought of using Virtual Machines to store the databases, but im a bit reluctant to the fact that the program you are using for VM stops working in future versions of OS and that I'm not familiar where the VM stores all the data

@marksaleski9890 3 года назад

This seemed like a perfect solution for me. But a recent release has broken browser integration on the mac for Chrome.

@muhammadwaleed2121 4 года назад

you have a such a great techniques but we as a beginner are not able to get that command if we also watch multiple times. please try to make these videos in slow pace and in detail so we can completely benefit from that.

@Cyberspatial 4 года назад

Noted, thanks for the feedback!

@MadaraUchiha-je4jm 3 года назад

Keep us secure ❤️❤️

@Cyberspatial 3 года назад

Will meet you halfway!

@YannMetalhead Год назад

Good video.

@davejrich 3 года назад

After viewing your video I am definitely going to go with an offline manager up until now I have been using a cloud based manager but I take your point what happens if it goes down I will be stuck. Awesome content.

@aaron6841 2 года назад

Back up your password manager if they go offline upload the file into another password manager simple you'll never lose access!!!

@rsturdy4045 2 года назад

Like so many others I really enjoy your channel.Im a Kaspersky Total Sescurity user so I use their PW mgr.Your thoughts on their manager? Appreciate reply Thx

@kbytes92 Год назад

Was using Lastpass premium for almost 2 years now but now I have migrated all my credentials to KeyPassXC. It is quite a hassle to cleanup the database because while importing the database file from LastPass, almost everything is scrambled. Like for example Username went to the "title" field and the password went to the "Username" field so I have to manually fix everything. Its a matter of time.

@aaron6841 Год назад

Hey what's your keyboard and mouse pad looks awesome are you using a windows computer?

@SmedleyButler1 Год назад

Is it true, using a chromebiok is just as safe as the "next best", recommended using Linux in a virtual machine on a windows computer? For "normies" that don't have a chromebook but do have windows?

@SmedleyButler1 Год назад

Pgp and sha!? Thank you! Your the first I've found specifying that! Still it would be great if you could do a video on EXACTLY how to do those verifications , especially on ANDROID FOR ANDROID... nobody has done this and many people don't have computers..

@erehyeager6456 3 года назад

The powershell thing isn't working with me. Can I skip the verifying part?

@kamruzzamanmilton 3 года назад

Love from Bangladesh..

@Cyberspatial 3 года назад

Thank you :)

@xugo91 2 года назад

I personally use Bitwarden. I tried to setup KeePass/Keeweb but I didn't manage to make it work with the browser. And I guess it's better for the syncing ?

@Cheatcoe 3 года назад

Quick question: Does KeePassium work as well?

@Cyberspatial 3 года назад

Never used it, but it's probably fine. On a phone, you might want to use just a subset of the passwords (separate database file).

@Josiah_Harder 2 года назад

Hello could someone give me a hand? Im stuck on the download part because I'm unable to verify the code being authentic. When following the provided instructions on the website it asks me to download something else called gpg 4win to verify the code. But how am I supposed to verify the code of that program then and I'm uncomfortable downloading all these random programs that I don't understand

@pabloinberlin Год назад

I use Passbolt.

@kayengvang342 2 года назад

Awesome video, I just find out that I do not have to pay LastPass $3 a month.

@gabrielemilito 3 года назад

Is it safe to save the KeepassXC database on Google Drive, so I can sync from many devices? Obviously with 2FA and a complex password on Google Account.

@phizlip 2 года назад

Yes only you know how to decrypt your db

@leonardodantas4577 2 года назад

Noticed you used a tutanota email address as an example. Is it better than protonmail? Which email provider do you recommend?

@phizlip 2 года назад

protonmail can be subpeonad

@Czarmzy 2 года назад

I use keepasxc & insync to sync it on my desktop devices.

@JishnuChatterjee 11 месяцев назад

💕 KEEPASS 💕

@samysamy5849 3 года назад

Just found this channel and I already LOVE IT !!! I would love to start learning cyber security, coding... But at 17, and without any knowledge in this domain (not even the basics)... Do you think I am too late ? Or is it still possible for me to reach the tops in cyber security and coding ? (i.e: What computer do you advice me to start training and learning from? Is there anyone here who could help me learning... ? Or at least, learning how to learn ? Thank you so much !!!)

@Cyberspatial 3 года назад

Sm Samy Hey man, you are absolutely NOT too late to get into cyber security. It takes 10 years to get really good at any skill, so 17 is the perfect time to start. At 27 you'll be just beginning your career, and if you start now you'll have a huge leg up compared to others just starting to learn in their mid-20s. You really should start with a laptop that has enough CPU and RAM to support running virtual machines. At 4 cores minimum and 4-8GB RAM minimum. This way you can use a hypervisor like VMware or Virtualbox to run Linux virtual machines to start learning different tools. If you're really brave, start by installing some kind of Linux distribution like Ubuntu to on it as your main driver. A lot of the process is troubleshooting, figuring out technology stacks, and tinkering around." Take a look at this article to start: hackernoon.com/how-to-become-a-hacker-e0530a355cad

@samysamy5849 3 года назад

@@Cyberspatial Hi Sir ! Thank you so much for answering (and that fast !) ! I have to admit : everytime I see my classmates that know how to code, or people that are younger than me but with so much knowledge... I start to believe that I'll never be able to keep up and reach the required level ! Even thought I feel attracted to this whole world (that I briefly understand) of cyber security, data... So thank you for your comment ! It helps me build confidence and enter this new world ! I will try to find a good laptop and watch as many videos/read as many articles that I can (starting with the one you shared with me thank you !), and then practise ! I hope that I will someday become "good" at this... or at least understand lol ! Thank you so much ! :)

@Cyberspatial 3 года назад

Sm Samy that’s awesome to hear! Keep up the hard work!

@trazac 3 года назад

KeePassXC is a fork of KeePassX, not KeePass. KeePass and KeePass2 are still in very active development. KeePassXC's main advantage is that it's natively crossplatform whereas KeePass is built on .Net.

@bishnuchowdhury4939 2 года назад

Great

@gpgthefunnyreligion4927 2 года назад

My government is not chasing me. This is so advanced.

@BobDoe_69 3 года назад

nice

@siddheshghag5889 3 года назад

Offline password since it would be more secure than the cloud based one.

@Cyberspatial 3 года назад

Convenience and cross-platform syncing are other considerations for cloud-based. It's a trade off!

@faheemhossain9560 3 года назад

Please can you make a video on how to password protect files in both windows 10 and linux.

@Cyberspatial 3 года назад

That's a pretty good idea, something like encryption options and considerations and different tools...

@boahneelassmal Год назад

keepass + Syncthing and you don't need to store your kdbx in _any_ cloud, be it commercially available like dropbox or self hosted like owncloud. Also: this video makes it seem as if the 'original' KeePass client is not in active development, when it very much is. It also offers a huge amount of Plugins...

@alejandrotadeo2933 2 года назад

What laptop stand was that in the intro 😍😍😍😍😍

@creonte38 3 года назад

I don`t understand if use keeepass browser extension is secure or not. I don`t use keepass browser in my Linux. Is it secure use keepass browser or not?

@Cyberspatial 3 года назад

I don't like browser extensions. Best setup I've used is to keep Keepass+database in a separate VM and do a secure copy+paste (QubesOS)

@creonte38 3 года назад

@@Cyberspatial Thanks for your answer.

@Steve-vb8wy 3 года назад

What if you store your file on both cloud and offline? The reason I put it on the cloud like google drive is to make it easier for me to update my databases for any new entries and back them up on my local devices.

@Cyberspatial 3 года назад

Cryptomator is a good option for creating an encrypted vault locally that's sync-able via Google Drive.

@Steve-vb8wy 3 года назад

@@Cyberspatial is cryptomator the same as veracrypt?

@Dakkaroni 2 года назад

@@Steve-vb8wy no it's not

@SmedleyButler1 Год назад

What about the libre "Only key" and "solo key"? Anyone vet their code and packet traffic?

@arifulislamleeton Год назад

Good afternoon

@nym4960 3 года назад

How does this compare to bitwarden?

@Cyberspatial 3 года назад

Bitwarden is good for cloud-based.

@charithadissanayake3304 3 года назад

⁦♥️⁩⁦♥️⁩⁦♥️⁩⁦♥️⁩

@Cyberspatial 3 года назад

Thanks for the love!

@charithadissanayake3304 3 года назад

Thankyouuu... ⁦♥️⁩ love from srilanka⁦🇱🇰⁩ keep doing your amazing vedios 👏👏👏

@Cyberspatial 3 года назад

Gaya De thanks for the support!

@igu642 Год назад

❤❤❤❤

@lovelyresidor5388 2 года назад

I find a good VPN in this channel

@barzinlotfabadi Год назад

I couldn't say no as soon as I saw the bearded tattooed lumberjack cyberwarfare expert

@scars707 3 года назад

Vocals= Jungkook Content= 🗻❤️ Just single word cyber security= cyberspatial! 🔥❤️

@Cyberspatial 3 года назад

Thanks!

@Blarks 2 года назад

good video, but no word on putty integration?

@excaliber2845 3 года назад

What do you think of nordpass

@Cyberspatial 3 года назад

Excaliber No thoughts. 1Password and LastPass have more brand recognition and history, I believe. If you need extra security, keeping your password database offline using KeepassXC never hurts.

@excaliber2845 3 года назад

@@Cyberspatial OK thanks

@suryateja_1902 3 года назад

Obviously, offline Password Managers would be the priority...

@Cyberspatial 3 года назад

Online ones do have some advantages, though like multi-device sync and key recovery. Really depends on the needs of you and your family.

@draco24able 3 года назад

@@Cyberspatial But that risks more exposure to data breach and the whole concept of a password manager is at risk, right?

@theraven.4 3 года назад

@@draco24able You have to manage risk. For most people Bitwarden and others are reasonable choice because you can access it from anywhere plus they are expected to follow security practices. But with KeepassXC you have to store the database in the cloud to sync passwords and if you don't make any backups. You just lost all of your passwords if someone deletes the file. Nothing is 100% perfect and will always have trade offs.

@wigoow1206 2 года назад

Keepass of cause! The database goes into my owncloud.

@vishalaggarwal1291 3 года назад

but what if the keypassxc itself sell the passwords of their users🙄🙄😶❓

@Cyberspatial 3 года назад

At least you'd know who was selling it: github.com/droidmonkey You can always inspect the source and build yourself: github.com/keepassxreboot/keepassxc

@RBzee112 2 года назад

I use Bitwarden with 2FA enabled.

@christopherhall1216 2 года назад

"The only other alternative is each egg in many baskets" ?? how does this even make sense? What about each egg in its own basket? I can't even imagine what each egg in many baskets means. Please helps.

@LibertyFixxxer 3 года назад

I do love this. However. As a gamer. I download a lot of things. How do I keep my entire computer safe? Even though this password manager is local, what stops someone from hacking my entire computer and having it anyways?

@Cyberspatial 3 года назад

1. Compartmentalize. Do sensitive things on a separate computer. If you can only use one computer, do everything in a VM and keep the host clean. 2. Masked emails too. Scrub your online information/personas. Consider deleting social media. 3. Don't install pirated software. In fact, install as little software as possible on your computer except for the bare necessities.

@LibertyFixxxer 3 года назад

@@Cyberspatial so if I did sensitive things on a separate computer, do you recommend not having any of the emails I use on the gaming computer? I already got rid of social media ;)

@Cyberspatial 3 года назад

@@LibertyFixxxer Recommend you not log into accounts on the less trusted computer. Ideally you might also want them on separate networks, or connected one at a time, depending on your threat model.

@einsteinwallah2 3 года назад

what if gpg4win is infected ... gpg4win is ugly windows sister of gpg for linux ... any online resource where we can do signature verification? ... don't windows bundle something similar with their os?

@swarajdas5348 3 года назад

after pasting the code it show False what to do?

@Cyberspatial 3 года назад

If it's the checksum part, you either have a typo or the downloaded installer is malicious/tampered. If you're getting it from their official site and aren't being man-in-the-middle attacked, it's also possible you downloaded the checksum for a different version installer.

@manemperorofmankind8119 2 года назад

Honestly, putting all your passwords behind 1 bottle neck sounds like trouble waiting to happen. I do need to find a better way for myself to do it though, it is getting ridiculous.

@pt8306 2 года назад

Using a cloud-based password manager is pointless when you can just whack your "offline" KDBX file in your dropbox folder

@koenpauwels98 2 года назад

The syncing isnt seamless through Google drive. Or am i doing something wrong? 🙂

@ColtonDuckering 2 года назад

@@koenpauwels98 I would use something like syncthing for syncing

@koenpauwels98 2 года назад

@@ColtonDuckering Yes even then you get loss of records sometimes. Just host A vaultwarden somewhere :-)

@Matschbacke25 3 года назад

I use 1Password.

@Cyberspatial 3 года назад

Another great option!

@kcgunesq 2 года назад

I'm sure this is a good method that less than 1 in 100,000 will use.

@JarppaGuru 2 года назад

10:21 hacker can do same thing? and receiver give public key for sender(this time hacker) ofc files he send is signed with correct using receiver public key lol. whats secure of that lol only way is talk phone with person and make password protected file and gve password on phone lol. thats onlyway in that moment not day later. hacker grab file crack password change files put back own apps using same password and vola lol. same goes every "secure way"

@robtihanyi1155 Год назад

Way above my understanding level unfortunately... maybe somebody could write an app to help non computer people use these services LOL

@commandcracker42 Год назад

Experts write thair own password manager with helix in rust using only thair own libs

@Cityj0hn Год назад

what the... How do you lose all your eggs if you put them in seperate baskets?

@JarppaGuru 2 года назад

11:37 more NO dont give password yet again another lol

@sbowesuk981 2 месяца назад

11:25 - 99% of people watching this video should categorically skip self-hosted password managers and instead go with a reputable company like Bitwarden, 1Password, etc. The notion of self-hosting being "more secure" depends massively one one thing, the human being doing the self-hosting knowing EXACTLY what they're doing. If that's not the case, then self-hosting is arguably the WORST solution, as the risk of leaking or losing everything becomes much higher than a decent password management company screwing up. This video pushing random people to self-host and avoid cloud based solutions is actually poor form, because it overlooks that most people simple aren't qualified to pull it off safely.

@JarppaGuru 2 года назад

10:09 there it is you give that site your password. they know your password LOL is it funny. thats only reason have every site own unique password so bad admin has no use of it(there is more admins on world than hackers?). you trust apple?