I believe web security is something that most, if not all, web developers deal with when developing a site. While the burden of login and data security rests on the site and developers, the login details of the users rest on the users themselves. That’s why I recommend a free program for password management: KeePass.

KeePass is essentially a database program that allows you to create entries for your login details for websites, accounts, etc. These entries are then saved into a database file and secured by a master password and/or key file of your choice. The database file you create is itself encrypted using 256-bit AES, as well as created to protect the file from being hacked using a dictionary attack. So, you can be safe in the knowledge that if someone gets a hold of your database file, you are protected from it realistically ever being hacked.

Once you have your entries created and your master password chosen, all you need to do is simply open the database file with KeePass and use your master password to login. From there, you can open your web site login entries and simple drag and drop your usernames and passwords into the appropriate website inputs for easy use.

A portable version of KeePass is also available for download, which is standalone and does not require installation. The beauty of this particular setup allows a user to keep KeePass and their database file together for password retrieval on the go. For example,  you can carry KeePass and your database file on a flash drive together, or even sync your database file using Dropbox.

One feature of KeePass that I love is a simple one: random password generation. Using KeePass to create new entries encourages the use of random characters for passwords. Where a simple word password can easily be cracked, creating a truly long, randomly generated character string makes the password exponentially harder to crack.

Here are tips I recommend if you are going to jump into KeePass:

1. Create a new database and select a long, easy to remember password that mixes letters, numbers, and synbols. This is the password that locks the whole thing down. Forget this and you’ll never be able to retrieve anything in the encrypted database. If you need extra security, consider creating a key file to accompany your password.
2. When creating a new online account (and in turn creating a new entry), use the 256-bit Hex Key random password generator. If you can only use so many characters for your online password, consider using the 40-bit Hex Key random and deleting the last couple of characters if needed.
3. Create multiple copies of your KeePass database file and store them elsewhere. In case of catastrophic emergency, such as a fire that destroys your PC, as well as all the burned backups in your house, you’ll have an off site copy. Also, consider emailing yourself a copy weekly or storing one in a flash drive away from your PC.

Using KeePass and its random password generator can strengthen your online accounts, as well as help you manage your passwords in one, consolidated place.