Note: If you are working for a company or government agency please consult your IT department and policies before using or installing anything on your corporate device. The information in this article can be used at home.

To be a good and effective password manager it will need 3 key qualities:

1. Simple to use
2. Secure
3. Ubiquitous

First, if a software is too difficult to use people will just use something else (like cheat on password rules). Look for a software that makes it easy to generate a strong password when you are creating an account on a website. Ideally, the software should integrate with your default browser. It should also be easy to find the password you need when you need it. Again, browser integration is helpful but not always necessary.

Second, the software must be secure. All of the top names in password managers are considered secure if they are used properly but beware of poorly-written stuff you might find in an app store or elsewhere. How do you know? Read reviews and ask your friendly resident techies. The question always comes up about if it is safe to keep all your passwords in one place. What if someone breaks into your password manager. That’s a valid point but the alternative is far more risky. Why lock your house door when someone could easily break the window and climb in, but we still lock the door. So to continue that analogy do you use an old skeleton lock on your front door? Why not? It’s just too easy to pick, isn’t it. Well your password manager is the same idea. You need a deadbolt on the front door, a strong high entropy (entropy = complexity) password. The good news is that your password manager has no windows. There is no way to get in except through that front door. One strong lock and your passwords are completely secure. In fact, the file that holds your passwords in a password manager is so secure that even if a hacker has the file it could take millenia to crack your password if you use a strong enough password (and they don’t get really really really lucky).

The third key quality if ubiquity, the need to have access to your passwords from anywhere. With the right setup it is even possible to have mutiple users in a company share a password manager and all be able to access the passwords from any device (Mac, PC, Android, iPad). Think about what devices you use (or may use) and be sure the manager you choose can share the same file across all of those devices. This is usually accomplished by using a cloud drive like DropBox. Avoid products that require you to move your passwords via a removable drive such as a flash drive or thumb drive. While some settings may make this the only option, it puts your password file at risk of loss or theft and really isn’t necessary for most users.

iPassword by AgileBits

AgileBits’ 1Password is my personal favorite and has been our company password manager for several years now. It is one of the more expensive options (~$49) but earns it’s keep. It has versions for Mac, Windows, Android, or iOS and can be used across devices with DropBox. Even with hundreds of passwords I’m able to quickly search for the one that I need and either copy/paste the password or use 1Passwords Go&Fill feature to have it open the website and fill my username/password automagically. When I create a new website account I start by creating the login on 1Password. I fill in the name, URL, username, and then have 1Password create the password for me.

1Password is able to create whatever entropy (complexity) I need for a given password. Our standard here is 18+ characters with 2 digits and 2 symbols, has to be random, can’t be used anywhere else. However, some sites can’t handle such complex passwords and it is easy to tone-it-down a bit in 1Password.

What else does 1Password do for that much money? A lot. 1Password will easily manage credit cards and auto-fill your data, driver’s licence and passport (great for travel emergencies), hold secure notes, frequent flyer/rewards cards, software keys, credit cards, bank accounts, identity info, and more. 1Password downloads and stores the logo for most websites making it easier (and just prettier) to find your passwords again. You can also keep notes for each account and even upload attachments. For example, in addition to just keeping my passport number and information (I travel a lot and it’s good to have that info at hand in case of loss/theft) I also upload a scan of the document. Same for my driver’s license. I can also tag all of these to help categorize and organize. It also keeps a history of your passwords so that you can go back to see if a password has already been used which is helpful for some accounts that require you to reset your password on a schedule. 

Browsers

Browsers are also a good place to store your passwords securely. Chrome, for example, will store your passwords and even sync those across devices via your Google account as long as you use Chrome. It is secure and very handy. I use this across my Mac, PC, Android, and iPad devices since I use Chrome as my default (but not my only) browser. The weakness here is that I do use other browsers so if I’m in IE or Firefox I’m out of luck. 

Other Options

Since one shoe does not fit all here are a couple runner’s up.

LastPass is a strong contender here and for some maybe the winner. LastPass works on just about every device and can sync across them. A big plus is that most of LastPass’ products and features are free and the premium features are only about ~$12/year.

Another great product is KeePass, an open source project that handles most devices. The down side is a lack of sync capability which forces most users to put the encrypted password file on their flash drive.

Additional Resources

http://www.google.com/goodtoknow/

http://staysafeonline.org/

http://www.onguardonline.gov/

http://mn.gov/oet/support/training/cyber-security-awareness/

 Evaluation and Deployment

• Microsoft Office 365 alignment index calculator kit: http://j.mp/166e5RY
• OnRamp: http://j.mp/17lGinG
• Advanced Deployment Guide on TechNet: http://j.mp/16VvevA
• Microsoft Assessment and Planning (MAP) Toolkit: http://j.mp/10fofIL
• SharePoint Online: software boundaries and limits: http://j.mp/16uMfP4

Exchange

• Exchange Server Deployment Assistant: http://j.mp/13tfnFz
• Quest (Dell) Public Folder Migrator for SharePoint [Paid Product]: http://j.mp/17XDfQf
• Microsoft Exchange Server Public Folder DAV-based Administration Tool: http://j.mp/11yJ1Jm

Directory Sync and AD-FS

• List of attributes that are synced to Windows Azure Active Directory and attributes that are written back to the on-premises Active Directory Domain Services: http://j.mp/15FR7RR
• Plan for and deploy AD FS for use with single sign-on: http://j.mp/12potzK

Mobile

• How to disable Exchange ActiveSync for users in Office 365: http://j.mp/12poDHl

PowerShell

• List of Resources: http://j.mp/16VvpXG
• Install Windows PowerShell for single sign-on with AD FS: http://j.mp/YcFblm

Office ProPlus

• Office ProPlus on TechNet: http://j.mp/12usVvJ
• Office Deployment Tool for Click-to-Run: http://j.mp/18FX8fU
• Click-to-Run Deployment and Management – Slideshare by Brian Shiers: http://j.mp/10tZfMv

Other Resources

• Office 365 URLs and IP address ranges: http://j.mp/16uK0v5
• MOSDAL (Microsoft Online Services Diagnostics and Logging) Support Toolkit: http://j.mp/10tYdA2
• Microsoft Remote Connectivity Analyzer: http://j.mp/19jmCxn
• Introduction to Office 365 Architecture (Ignite Webcast): http://j.mp/15FTNPp
• Office 365 Jump Start for IT Pros: http://j.mp/YC6PaN

As much as I’m a fan of Google Apps, Microsoft’s 365 is a much more enterprise-friendly offering. I don’t think QuickOffice will be a panacea for Google by any stretch. 365′s appeal comes more from the enterprise features around administration, compliance, and support rather than end-user considerations (though those do exist).

Read Lardinois’ article on Techcrunch here: http://j.mp/16utXgQ

While still a young organization, the Cloud Credential Council (CCC) has ambitious plans to standardize vendor-neutral certifications for the emerging cloud industry. In this way they are similar to the much more established CompTIA. In fact, CompTIA has picked up the first exam, the CEP, under their own brand. For now the VE course and exam languish in obscurity which is a real shame. The VE course together with the CEP course make a very solid introduction to cloud computing fundamentals and is of value to business decision makers, IT leadership, the C-suite, project managers, and others involved in an organizations decision to enter the cloud.

Both the VE and CEP courses are available through Sawyer Training. We are a member of the CCC and aCCC authorized training partner.

Disclaimer: George occasionally serves as a reviewer of ITpreneurs curriculum and frequently teaches VE and CEP courses. STI is a member of CCC and an authorized training partner.

Technology moves fast and keeping up can seem so impossible we often just give up. It’s easier to stay in our old tools and hope for retirement. In this session George will help you grasp the big-picture of technology and develop some simple techniques for seeing what’s of value and what’s just a fad. We will answer questions like: “What is “the cloud” and how it will change government?”, “Will iPads help or hurt us?”, and “Will this [insert-new-technology] help our organization or be a waste of money?”. This session will explore the current and future trends in government IT without the techie-speak.

Helpful links

Office 365 Government plans

Presentation on Cloud Computing (with additional resources)

Google Apps for Government