Introduction About Site Map

XML
RSS 2 Feed RSS 2 Feed
Navigation

Main Page | Blog Index

Friday, July 15th, 2005, 2:30 am

Palm and Password Management

Like many others, I keep every password stored in my Palm. Virtually any username, password and network address which I must remember will be located under one category or another in electronic form.

Quite a long time ago I discovered, much to my surprise, that others use the exact same methods as me for storing passwords. This was not the case since they were influenced by somebody else, but simply because it seemed like the right thing to do; it came naturally. Most recently, it was a technologically-oriented lady whom I noticed ended up storing her passwords in the exact same fashion as me. This begs the questions: does every Palm user adopt the same habits? And if so, was it self-taught?

Palm TungstenNo doubt there is a certain pattern — a certain adaptable method. Many start off by entering various scattered password into a single password-protected memo (the ‘piece of paper in the drawer’ equivalent). As experience develops, time takes its toll and scale becomes an issue. Passwords begin to migrate to the address book, possibly to be laid in an organic form like password under the field called ‘other‘ or ‘address‘ while the account name becomes just ‘name‘. In due time, even a single category in the address book does not suffice because of the ever-increasing number of accounts. Then, different categories for different passwords get created. This establishes layering, or a shallow hierarchy.

There is a huge advantage to this approach: when each and every record containing a password is marked ‘private‘, there is essentially one ‘master password’, much like a master key. The method rids you from the need to remember passwords. One password will unlock all others. It enables you to use a variety of different passwords without ever needing to memorise them.

Yet, as a final word of caution, records are not entirely safe on your computer (the PC-side). When you HotSync your data, this data is transfered and then stored unencrypted (in readable form) on your filesystem. Access to your hard-drive enabled access to your passwords, especially by a Palm-proficient intruder, perhaps an overly curious colleague. Having said that, the method fully protects your password in cases of PDA theft. I once came across all passwords of an MIT system administrator (while searching the Web for Tasks conversion tools) and informed him immediately so that he could empty corresponding Google cache. Needless to mention, he was frustrated and puzzled.

In summary, read the suggestions carefully and internalise what other people have learned from their mistakes. Be aware of the pitfalls and sensitivities of the method to intrusion. Lastly, never let your brain be consumed by a collection of crypic passwords. Remember just one master password.

Cited by: PalmAddict

2 Responses to “Palm and Password Management”

  1. jim37 Says:

    Hate to burst your security bubble, but there’s several freeware programs to reset/recover the Palm’s security password. Further, Palm provides documentation on how to regain access to your private records if you lose the security password. Great security, eh? Get a real program to maintain password security like SplashID. Simple, easy and secure. What more do you want?

  2. Greg Says:

    I agree with your basic premise, but I use a dedicated password information manager. I use Cryptinfo, but there are other similar apps out there. Also have the advantage of secure sync’ing back to the desktop.

Back to top

Retrieval statistics: 21 queries taking a total of 0.125 seconds • Please report low bandwidth using the feedback form
Original styles created by Ian Main (all acknowledgements) • PHP scripts and styles later modified by Roy Schestowitz • Help yourself to a GPL'd copy
|— Proudly powered by W o r d P r e s s — based on a heavily-hacked version 1.2.1 (Mingus) installation —|