Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Apricorn Aegis Secure USB Key for password storage?


  • Please log in to reply
2 replies to this topic

#1 sander66

sander66

  • Members
  • 77 posts
  • OFFLINE
  •  
  • Local time:06:51 PM

Posted 13 May 2017 - 03:49 PM

I still can't warm up to the idea to keep passwords in the cloud.

 

How safe is the idea to use a OS independent encrypted USB stick with onboard keyboard?

 

https://www.apricorn.com/flash-keys/aegis-secure-key-3?gclid=CLKp8eHe7dMCFYu2wAodxC0HzA

 

I figure the data is rather secure on the USB drive. The passwords could be in a Excel file.

 

My only concerns:

- if there is malware on the PC that could read the screen

- If I use a Excel file I likely would end up with a temp file on the host PC?



BC AdBot (Login to Remove)

 


#2 Jeff2017

Jeff2017

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:05:51 PM

Posted 24 May 2017 - 04:46 PM

I don't like to have my personal information in the cloud either.  I want to keep my passwords and my important data off the internet.  

 

Check out this new product: https://qkey.com/

 

Pretty cool: stores log in's, passwords, payment info (credit cards) and data on the encrypted key.  Super easy to use and web browsing is done through the keys' dedicated, secure web session that disappears when the encrypted key is removed.  No files or data remain on the computer or have to be stored on the internet.

 

I just saw it.  It has a great user experience, very secure and all of MY critical info is controlled by me, OFF of the internet if I choose.   

 

If you check it out, let me know what your think.  



#3 Didier Stevens

Didier Stevens

  • BC Advisor
  • 2,698 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:51 AM

Posted 25 May 2017 - 03:45 AM

I use IronKey and datashur encrypted USB sticks. Solid solution. Your Aegis looks like a datashur stick, so it's probably rebranded.

 

I would recommend that you use an offline password manager in stead of Excel. For example KeePass. They offer extra protection (compared to Excel), not only regarding temporary files like you mentioned, but for example clearing your clipboard when you copy a password to your clipboard.


Didier Stevens
http://blog.DidierStevens.com
http://DidierStevensLabs.com

SANS ISC Senior Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2019
MVP_Horizontal_BlueOnly.png

 

If you send me messages, per Bleeping Computer's Forum policy, I will not engage in a conversation, but try to answer your question in the relevant forum post. If you don't want this, don't send me messages.

 

Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users