Welcome back in this lesson. We
will go through password managers. And as I have mentioned, I
will show you only for which I think is the most
appropriate one at present time, that password manager
is called keep a sexy in
any of my security trainings. When I get to the password section. I
will have to ask who likes passwords. I
usually do not get a lot of positive answers.
But there are elegant solutions that can increase that the security
of your personal and business digital environment and
help your osint investigation in the end better,
managers are great while you conduct your own
line investigations because you are likely to create numerous
different profiles and accounts for
various Services across the web with a password
manager. You will have a secure database which is unlocked only
with that one. Password that password
should be something unique and very, very
Long. And by that, I mean, at least a 25 character
long, I recommend to check the latest recommendation on
passwords by the National Institute of Standards and
Technology.
Now, just a few additional words about password managers. There
are two main types of password managers online and
offline. I recommend offline and I will tell
you why. By explaining the difference between them an online,
password manager, which stores your data base on the
Internet is very practical and appealing since it has
the ability to sync the password database to all devices over
the internet, but if something goes wrong with the hosting
provider or the place where the database is stored, you're
exposing yourself.
Yourself to unnecessary Risk by
keeping your password database locally on your computer, you're
eliminating the entire attack surface. And
that is the reason why I recommend offline kind.
Just as a side note, do not forget about web
browser integration. It is easier. If you can
use that feature. Keep in mind, will your chosen
password manager, work with your browser? And
if yes, how and where are your password? Stored? The
thing is that we humans will
probably always choose ease of use over
security or a safe. Hooray. Now, let's get
back to our virtual Olsen machine and see how you can
use that. Keep a sexy pass.
Third manager. Here. We are on our
osint machine. And as I have mentioned key passes
across platform app, which works also on
Linux. But installation is a little bit different than on
the Windows or Mac OS. So also include the
how to of the installation in this video. Although,
the installation process is not that complicated. We
will use a terminal for the installation. So fire up
the terminal.
And type.
Sudo apt-get install
keepass.
XE type. The sudo password.
Wait, a few moments.
And no to keep a sap when distillation is
done. The keep a sap should be available on. The
Linux is dashboard in my case from the
abundance dashboard. So let's check it out.
Here it is.
I will right click it and add to favorites on the dock
to add it to the dock.
So when we fire
up keepass for the first time, we need
to create a new data based so we
can start filling up the database with our credentials.
Select create new database.
We're calling osint.
Passwords.
You can use the advanced settings here for encryption algorithm
and other settings,
but I will leave it all by default.
If you remember, I previously mentioned to create
the master password to be really complex
and big and long, but I will not
do that here rather simple one because
we are only testing the app.
so, put down the password I like
Passwords. All lowercase.
and then,
Okay. Now, we are asked to save the
keypads database.
I'm going to save it on desktop, keep
the default name.
Just to give you an additional advice. I would recommend you
to write down that master password, somewhere
and store it in a safe place. Just
if you lose or forget that password, you won't be able to
access your database.
As you can see, here is the root. Here's the default group called
route. Let's create a new group entry, right-click
new group name. First
case.
You can even.
Define an icon.
Or use some other properties.
Here is our first case now
to add credential entries, right?
Click.
The perske, the first case space
new entry.
And we're going to add our first credential.
We'll put down the title, some
social network username.
John.
And for the password, we will use the
password generator.
Option. As you can see, you can choose a
password with the length, of course and
we use small uppercase lowercase
letters, numbers
and special characters and so on and
also a great feature is the passphrase which
I would really recommend
You can choose the word count. And as you can see,
the entropy here is increasing
or decreasing.
Usually five to six words is enough,
but more is better. Just
be sure that you're at your service
provider. Very, you are putting your
password in.
Has the ability to save a long password?
I will choose 7.
And let's see our password.
As you can see, also here you have an option word
separator. So it's pretty self-explanatory.
You see?
It's adding the separator.
You can add space whatever
you want.
We will leave it at the default.
So here is a password and press ok to
save.
Now when you run the app again keepass
will open the less database you used in
immediately asked for a master password. And
now after our note taking and password managing
section, we will continue our ocean journey by
covering search engines part of Open Source intelligence in
the next video. So see you there.