Other Password Management Systems
It’s reasonable to expect that in the course of this session, participants may raise the subject of other password management tools that they have used in past, or have heard about from their friends or colleagues. In addressing this topic, there are some key points to ensure that you cover when discussing the pros and cons of other options (either LastPass or 1Password are likely to be mentioned, for example) versus KeePass/KeePassX:
Do these solutions provide any kind of encryption, or any other option for protecting password data?
For example, The built-in Key chain utility for OSX is an excellent password manager, although it lacks some of the features of KeePassX, such as areas for Notes, an option for creating identical encrypted backups, “change password” reminders, syncing features, etc.
Are these tools open source? If not, how can we be certain of how safe our data will be with them?
Because their source code is available for anyone capable of reading it to review or audit, the transparency of open source software and tools permits them a greater degree of trustworthiness when it comes to how safe data shared with them is (or isn’t).
If they’re cloud-based, are you confident that the company who owns the service cannot access any password data?
This would also mean that they would not be able to disclose your passwords if their systems become compromised. It may be effective to mention that compromises have occurred with some of these cloud-based managers. One such example can be found here. This can also provide you with an opportunity to cover the qualities of KeePassX that make it more trustworthy that a company’s cloud-based system.
What is the participant(s)’ level of tolerable risk for using these applications?
This is important to discuss – in some cases, neither the real nor perceived risk(s) could be severe enough to rule out one of these other options.