正文
密码太多记不住 看管理密码的最佳利器
There's a war raging between hackers and companies, and you're caught in the crossfire. Every time a company gets hacked, you have to change your password. And don't you dare reuse it somewhere else.
黑客和企业之间在发生战争,而你也深陷其中。每次企业受到黑客攻击,你都不得不修改自己的密码,还不敢在其它地方重新使用这个密码。
Dreaming up a different password for every site and service is the only way to keep your stuff safe online, but it's also a gigantic nuisance. There's one thing you can -- and should -- do to help: Get a password manager program.
为每一个网站和每一项服务想一个不同的密码是让你的东西在网上获得安全保证的唯一办法,但这也是一件大麻烦事。对此,你能够、也应该做的一件事是:使用密码管理程序。
I have more than 150 different logins and counting. I'd have to be Rain Man to memorize that many passwords. So I went on a hunt for the best services for storing all my passwords, and whittled down the list to four that get the job done and offer enough security for most of us: 1Password, Dashlane, LastPass and PasswordBox.
我有150多个不同的登录名,这个数字还在增加。我必须成为雨人(Rain Man)才能记住那么多的密码。因此我开始寻找可以储存我所有密码的最好工具,最终将备选名单减少到四个:1Password、Dashlane、LastPass和PasswordBox。它们可以不辱使命并为我们大多数人提供足够的安全保证。
LastPass is a good choice for people who use newer technology like fingerprint scanners. For the really paranoid, 1Password offers the most control over where your encrypted vault of passwords gets stored.
LastPass对于使用指纹扫描仪等新技术的人来说是一个很好的选择,而对于真正的偏执狂来说,1Password可以对你的加密密码库的所在位置提供最优的控制服务。
For most people, I recommend Dashlane. It's simple, so you'll actually use it. It may even save you clicks.
对于大多数人,我推荐使用Dashlane。它很简单,所以你真的会用它,它甚至可以让你减少你点击鼠标的次数。
But, wait -- isn't storing all your passwords in one place a terrible idea? It's better than reusing easily remembered passwords everywhere. Password managers hide your information behind a master password that only you know.
不过,等等──把你所有的密码存放在一个地方,这难道不是一个可怕的想法吗?这总比在所有地方重复使用轻而易举就记得住的密码要好。密码管理器会把你的信息隐藏在一个只有你才知道的主密码后面。
Nothing is 100% guaranteed, but all four of these managers take the additional security step of never sending your master password over the Internet. They're like a safety deposit box that a professional keeps without knowing what's inside, or even holding a key to open it.
没有什么东西是有100%的保证的,但这四种密码管理器都采取了额外的安全措施,永远不会在互联网上发送你的主密码。它们就像一个保险箱一样,保管它的专业人士并不知道里面放的是什么,甚至没有打开它的钥匙。
In an age where more of our personal information lives, password protected, up in the cloud, we need defenses beyond antivirus software. Using a password manager is the next step.
在我们越来越多的个人信息通过密码保护的方式存储到云端的年代,除了杀毒软件以外,我们还需要额外的防护。使用密码管理器就是下一步要采取的措施。
Dashlane is like the memory you wish you had. It keeps track of not only passwords, but also credit card numbers and user IDs, filling them in when you need them across many different devices. It also keeps a helpful scorecard on the quality of your existing passwords, and nudges you to improve them.
Dashlane恰如你希望拥有的那种记忆力,它记录的不光是密码,还有信用卡卡号及用户名,当你在诸多不同设备上需要这些信息的时候就可以把它们填进去。Dashlane还有一个用处很大的记分卡,可以评估你现有密码的可靠性并敦促你加以改进。
Dashlane is free to use on any single device; a $30 annual subscription lets the Dashlane apps automatically sync your data across devices. You can try this premium service free for 30 days.
Dashlane在任何一台单一设备上都可以免费使用;缴纳30美元(约合人民币187元)的年费就可以让Dashlane应用软件自动同步你在各个设备上的数据,你可以免费试用这项高级服务30天。
Setting up Dashlane is a pleasure. Its app slurps up the passwords that been saved unencrypted in your Web browser, and learns new ones as you type them. All of this gets protected by the master password, encrypted in a database on your computer or mobile device. Every time you start your computer or open the Dashlane app, you must log into the app with that master password. (You can make it ask for your password more often, like whenever your device is idle for too long.)
安装Dashlane是一种乐趣。Dashlane应用会吞噬掉你在网页浏览器中没有加密的密码,并在你输入新密码时记住它们。所有这一切都得到一个主密码的保护,主密码在你的电脑或移动设备上的数据库中进行了加密。每次你启动电脑或打开Dashlane应用的时候,你必须用那个主密码登录进入该应用。(你可以让它更频繁地询问你的密码,比如当你的设备太长时间没有操作的时候。)
Dashlane uses an add-on to Web browsers, including Chrome, Firefox, Internet Explorer and Safari. When you're logging into a site Dashlane knows, it puts a small icon (a dashing impala) in the login box to let you know it can enter your username and password -- even your credit card number. If you tell it to, Dashlane will even press the 'login' button automatically. It doesn't work on every site, but does a better job than most.
Dashlane在网页浏览器上使用的是一个插件,适用的浏览器包括Chrome、火狐(Firefox)、IE(Internet Explorer)和苹果Safari。当你登录一个网站的时候,Dashlane是知道的,它会在登录框中放入一个小图标(一只奔跑的黑斑羚),以便让你知道它能够输入你的用户名和密码──甚至你的信用卡卡号。如果你令其这么做,Dashlane甚至会自动按下“登录”键。Dashlane的这种功能不是在每一个网站都能奏效,但比起其它大多数应用来效果好多了。
Along the way, Dashlane also tries to improve your security. When you're changing a password or starting a new account, it suggests a strong one that would confound even a supercomputer. And its colorful security scorecard cheerfully humiliates you into replacing weak or repeated passwords.
在这一过程中,Dashlane还会尽力提高你的安全保障。当你在修改密码或开启一个新账户时,它会建议设置一个甚至可以迷惑一台超级计算机的强效密码。它那五彩缤纷的安全记分卡会得意洋洋地奚落你,让你更换易被破解或重复的密码。