passwords.md 3.76 KB
Newer Older
1
2
---
layout: page
3
permalink: /external/access/passwords/
Jacek Lebioda's avatar
Jacek Lebioda committed
4
5
6
7
shortcut: passwords
redirect_from:
  - /cards/passwords
  - /external/cards/passwords
8
9
---

10
11
# Managing your passwords
 There are several tools that can be used for password management. Some provide limited (basic) features for free, some require a fee. Below are some password management tools that can be used:
12
13


14
15
16
17
18
|Tool|Notes|
|-------------------------|------------------------|
| [LastPass](https://www.lastpass.com)| Free for most features. Paid access allows secure sharing of passwords e.g. for shared infrastructure. If you're in charge of the archival and management of research data for your group, please check with the LCSB IT Team whether they can provide you a LastPass subscription.|
| [dashlane](https://www.dashlane.com) |Free for limited features. |
| [KeePass](https://keepass.info)| Free.|
19
20
21



22
# Securely sending passwords to others
23

24
When sending passwords to collaborators, it is not advised to use e-mail or instant messaging. The preferred way is to generate **password links**, and then send these links to collaborators. Password links can have varying expiry periods; a link may expire once visited, or it be valid for a certain duration. Below are a list of freely available tools that can be used to generate password links. We recommend that you use  **Privatebin hosted by the LCSB**.
25

26
27
28

|Tool|Notes|
|-----|------------------------|
29
| [Privatebin @ LCSB](https://privatebin.lcsb.uni.lu) (Recommended)|Free service provided by the LCSB. LUMS account required. |
30
31
32
| [Privatebin @ Uni-LU HPC](https://hpc.uni.lu/privatebin/) |Free service provided by the HPC team of Uni LU. No signup required.|
| [Zerobin](https://zerobin.net/) | Free. No signup required.|
| [Noteshred](https://www.noteshred.com) | Free. Signup required.|
Vilem Ded's avatar
Vilem Ded committed
33
34
35
36
37
38


## Privatebin hosted by the LCSB

### Sending a password
  1. 1. Go to [Privatebin @ LCSB](https://privatebin.lcsb.uni.lu/) and type the password you want to share into the Editor tab. You will be asked to enter your LUMS credentials when you click on "Send"<br/>
Laurent Heirendt's avatar
Laurent Heirendt committed
39
40
  <img src="../../external/img/privatebin-editor.png">

Vilem Ded's avatar
Vilem Ded committed
41
  1. Set expiry period
Laurent Heirendt's avatar
Laurent Heirendt committed
42
43
    -  For the highest safety measures, sender can allow password link to be used only once so it expires upon first access. This feature can be set by checking **Burn after reading** checkbox.

Vilem Ded's avatar
Vilem Ded committed
44
45
  1. You can also enter a password to protect your password link - this should be **different** from the password you are sharing!
  1. Click **Send** in right-top corner
Laurent Heirendt's avatar
Laurent Heirendt committed
46
47
    - you should be redirected to a page containing the password and password link
    <img src="../../external/img/privatebin-link.png"><br/>
Vilem Ded's avatar
Vilem Ded committed
48
49
50
51
  1. Share the **link** with your collaborator via your favorite communication channel

### Receiving a password
  * You have been provided a link to website where your new password is stored. (This link can be protected by yet another password you might be asked to enter.)
Laurent Heirendt's avatar
Laurent Heirendt committed
52
<img src="../../external/img/privatebin-password.png"><br/>
Vilem Ded's avatar
Vilem Ded committed
53
54

  * If you see following:
Laurent Heirendt's avatar
Laurent Heirendt committed
55
<img src="../../external/img/privatebin-expired.png"><br/>
Vilem Ded's avatar
Vilem Ded committed
56
    * You have either entered the wrong/incomplete link - try copy-pasting the link into your browser instead of clicking on it - or
Laurent Heirendt's avatar
Laurent Heirendt committed
57
    * your password link has already expired. In that case you will have to request a new link.<br/>
Vilem Ded's avatar
Vilem Ded committed
58
59
      **Warning!**: If the password link was set with one access only (**Burn after reading**) and you are sure that you haven't accessed the link so far, you should notify the password sender because there is a chance that your communication was intercepted and someone accessed the link before you.<br/>
      **Note**: If the page looks different from the pictures above, try using Google Chrome browser. If the issue persists, please take a screenshot of the page and send it to our [sysadmin](mailto:lcsb-sysadmins@uni.lu) team.