Feed
 

Password Manager (in particular Dashlane)

Avatar John Nicholas
I have circa 150 logins kept in this web manager.

The other day it informed me that due to a Dark Web leak about 30 were compromised and I should change them immediately !!

I soon deduced that 21 had the same or very similar passwords (silly lazy me), 2 had no password at all (?), 2 were not true logins, and 5 were bank related.

Although perhaps it was not a scam, the last 5 of course caused concern. But given the two 2’s, I thought it’s probably Dashlane being over cautious or a flaw in its software /Algorithms.

Nevertheless I changed the 21 alleged compromised login passwords to long adhoc generated ones, which was not as simple or as quick as Dashlane suggested.

That left me with the 5 banking ones. Apart from card readers and 2 step verification, banks seem to like using 6 figure "numeric" passwords. One of my other bank accounts wants 6 digits but allows alphabet and numeral mix., so that one was not flagged as being compromised. But the 5 in question insist on 6 figure numeric. But Dashlane rejects 6 or 8 figure numeric, and only becomes happyish with 10 numerals or more.

One bank is looking in to whether they should stick with its system or change.

I have yet to communicate wth Dashlane. So this post is to alert any other Dashlane users, or to invite comment.

Re: Password Manager (in particular Dashlane)

Avatar Tony Still
Changing the passwords is the cautious thing to do.

And because I'm paranoid:
Just make sure that in the process of doing so you only use addresses, websites etc that you independently know and trust, not links or whatever in any message you received. It's all too easy to rush to fix the problem and use a copy, malicious website that a fraudster sent you instead of the real thing.

Re: Password Manager (in particular Dashlane)

Avatar Mick Burrell
I agree with Tony about never clicking on a link in an email unless you're 100% sure it's legitimate - and even then be cautious!

Most members seem to be using Apple's Passwords app for this now but that will not store bank details. Instead, if you use the bank's iPhone app, security is handled by Face ID or fingerprint. I'm assuming your 5 banks have iPhone apps.

Re: Password Manager (in particular Dashlane)

Avatar John Nicholas
Hi both, thank you

Tony......no all my logins are known, and I never use links from emails or the like.

Mick......I rarely access online banking via my phone (screen rather small, fingers and thumbs rather fat, outside sunlight too bright), but the principal two banks use 5 figure passcodes on the phone not 6 required via the computer, and these are stored in my head not elsewhere. BUT I do any regular banking access on my desktop, using a card & card reader so usually don't need the 6 figure passcode which is required when one of the two alternative logins routes is used rather than the card.
The issue came to light because Dashlane flagged it up (as I said they over cautious ?), and also because a Building Society Bank had failed to issue a new card when the old one expired. I needed to get access before the weeks delay for the new one, and that bank said "...oh use the passcode route in the interim..."
 
Feed