- These applications and tools are approved by the UiO IT Security Manager for keeping UiO related passwords. The list is part of the UiO IT Security Policy.
- Contact the UiO IT Security Manager if you need other applications assessed for use at UiO.
Create a Master Password
Common to all password manger applications is that they must be secured with a password / password phrase that is at least as secure as the most sensitive password that is stored. The master password you create for your password manager application must be used for this purpose only. The master password MUST NOT be the same as you UiO password and must not be used for other applications, tools or services.
Multi platform applications
Enpass
Modern tools for keeping track of passwords and other secrets. Available on Windows, Mac, Linux and mobile decices. The mobile version is free for up to 20 passwords. The desktop version keeps track of unlimited passwords.
The secrets can be stored wherever you want and encrypted with a master password. We recommend that the file with secrets be stored in UiO's OneDrive solution. If this file is stored in a cloud service, the same secrets can be used from both your mobile phone and your computer.
Enpass may be used for two-factor authetication at UiO if you do not have a cell phone.
GnuPG
This is found in most linux distros, as well as for Windows and Mac. It can also be used to encrypt files and password protect them.
OpenSSL
See notes on GnuPG
KeePass / KeePassX
Recommended.
ssh-keygen / ssh-agent
SSH keygen and SSH agent are approved in that they store and handle keys using ssh.
Linux
Seahorse (built into some distributions)
If this is to be used, a separate key ring must be created for privileged passwords, so that these are not unlocked with your regular password.
Mac OS X
Keychain Access (built into the operating system)
If this is to be used, a separate key ring must be created for privileged passwords, so that these are not unlocked with your regular password.