WEBVTT - This file was automatically generated by VIMEO

1
00:00:06.900 --> 00:00:09.400
 Welcome back in this lesson. We

2
00:00:09.400 --> 00:00:12.600
 will go through password managers. And as I have mentioned, I

3
00:00:12.600 --> 00:00:15.300
 will show you only for which I think is the most

4
00:00:15.300 --> 00:00:18.400
 appropriate one at present time, that password manager

5
00:00:18.400 --> 00:00:21.100
 is called keep a sexy in

6
00:00:21.100 --> 00:00:24.700
 any of my security trainings. When I get to the password section. I

7
00:00:24.700 --> 00:00:27.600
 will have to ask who likes passwords. I

8
00:00:27.600 --> 00:00:30.000
 usually do not get a lot of positive answers.

9
00:00:30.200 --> 00:00:33.500
 But there are elegant solutions that can increase that the security

10
00:00:33.500 --> 00:00:36.500
 of your personal and business digital environment and

11
00:00:36.500 --> 00:00:39.800
 help your osint investigation in the end better,

12
00:00:39.800 --> 00:00:42.200
 managers are great while you conduct your own

13
00:00:42.200 --> 00:00:45.800
 line investigations because you are likely to create numerous

14
00:00:45.800 --> 00:00:48.300
 different profiles and accounts for

15
00:00:48.300 --> 00:00:51.300
 various Services across the web with a password

16
00:00:51.300 --> 00:00:55.000
 manager. You will have a secure database which is unlocked only

17
00:00:54.200 --> 00:00:57.500
 with that one. Password that password

18
00:00:57.500 --> 00:01:00.000
 should be something unique and very, very

19
00:01:00.100 --> 00:01:03.500
 Long. And by that, I mean, at least a 25 character

20
00:01:03.500 --> 00:01:06.700
 long, I recommend to check the latest recommendation on

21
00:01:06.700 --> 00:01:09.500
 passwords by the National Institute of Standards and

22
00:01:09.500 --> 00:01:10.200
 Technology.

23
00:01:12.200 --> 00:01:15.800
 Now, just a few additional words about password managers. There

24
00:01:15.800 --> 00:01:18.600
 are two main types of password managers online and

25
00:01:18.600 --> 00:01:21.300
 offline. I recommend offline and I will tell

26
00:01:21.300 --> 00:01:24.500
 you why. By explaining the difference between them an online,

27
00:01:24.500 --> 00:01:27.100
 password manager, which stores your data base on the

28
00:01:27.100 --> 00:01:30.200
 Internet is very practical and appealing since it has

29
00:01:30.200 --> 00:01:33.500
 the ability to sync the password database to all devices over

30
00:01:33.500 --> 00:01:36.400
 the internet, but if something goes wrong with the hosting

31
00:01:36.400 --> 00:01:39.800
 provider or the place where the database is stored, you're

32
00:01:39.800 --> 00:01:40.400
 exposing yourself.

33
00:01:40.500 --> 00:01:43.300
 Yourself to unnecessary Risk by

34
00:01:43.300 --> 00:01:46.400
 keeping your password database locally on your computer, you're

35
00:01:46.400 --> 00:01:49.300
 eliminating the entire attack surface. And

36
00:01:49.300 --> 00:01:51.700
 that is the reason why I recommend offline kind.

37
00:01:53.700 --> 00:01:56.400
 Just as a side note, do not forget about web

38
00:01:56.400 --> 00:01:59.400
 browser integration. It is easier. If you can

39
00:01:59.400 --> 00:02:02.700
 use that feature. Keep in mind, will your chosen

40
00:02:02.700 --> 00:02:05.600
 password manager, work with your browser? And

41
00:02:05.600 --> 00:02:09.100
 if yes, how and where are your password? Stored? The

42
00:02:08.100 --> 00:02:11.600
 thing is that we humans will

43
00:02:11.600 --> 00:02:14.200
 probably always choose ease of use over

44
00:02:14.200 --> 00:02:17.100
 security or a safe. Hooray. Now, let's get

45
00:02:17.100 --> 00:02:20.200
 back to our virtual Olsen machine and see how you can

46
00:02:20.200 --> 00:02:22.700
 use that. Keep a sexy pass.

47
00:02:22.900 --> 00:02:25.500
 Third manager. Here. We are on our

48
00:02:25.500 --> 00:02:28.400
 osint machine. And as I have mentioned key passes

49
00:02:28.400 --> 00:02:31.200
 across platform app, which works also on

50
00:02:31.200 --> 00:02:34.300
 Linux. But installation is a little bit different than on

51
00:02:34.300 --> 00:02:37.400
 the Windows or Mac OS. So also include the

52
00:02:37.400 --> 00:02:40.300
 how to of the installation in this video. Although,

53
00:02:40.300 --> 00:02:43.700
 the installation process is not that complicated. We

54
00:02:43.700 --> 00:02:46.200
 will use a terminal for the installation. So fire up

55
00:02:46.200 --> 00:02:46.900
 the terminal.

56
00:02:48.200 --> 00:02:48.900
 And type.

57
00:02:50.100 --> 00:02:54.600
 Sudo apt-get install

58
00:02:53.200 --> 00:02:56.200
 keepass.

59
00:02:57.500 --> 00:03:00.300
 XE type. The sudo password.

60
00:03:05.500 --> 00:03:06.800
 Wait, a few moments.

61
00:03:13.500 --> 00:03:16.100
 And no to keep a sap when distillation is

62
00:03:16.100 --> 00:03:19.300
 done. The keep a sap should be available on. The

63
00:03:19.300 --> 00:03:22.100
 Linux is dashboard in my case from the

64
00:03:22.100 --> 00:03:25.100
 abundance dashboard. So let's check it out.

65
00:03:30.400 --> 00:03:31.000
 Here it is.

66
00:03:32.200 --> 00:03:35.600
 I will right click it and add to favorites on the dock

67
00:03:35.600 --> 00:03:36.900
 to add it to the dock.

68
00:03:42.800 --> 00:03:45.900
 So when we fire

69
00:03:45.900 --> 00:03:48.200
 up keepass for the first time, we need

70
00:03:48.200 --> 00:03:51.200
 to create a new data based so we

71
00:03:51.200 --> 00:03:54.400
 can start filling up the database with our credentials.

72
00:03:55.900 --> 00:03:57.600
 Select create new database.

73
00:03:59.900 --> 00:04:02.300
 We're calling osint.

74
00:04:04.200 --> 00:04:05.300
 Passwords.

75
00:04:10.200 --> 00:04:13.900
 You can use the advanced settings here for encryption algorithm

76
00:04:13.200 --> 00:04:16.700
 and other settings,

77
00:04:16.700 --> 00:04:19.300
 but I will leave it all by default.

78
00:04:22.500 --> 00:04:26.000
 If you remember, I previously mentioned to create

79
00:04:25.100 --> 00:04:28.900
 the master password to be really complex

80
00:04:28.900 --> 00:04:31.200
 and big and long, but I will not

81
00:04:31.200 --> 00:04:34.300
 do that here rather simple one because

82
00:04:34.300 --> 00:04:37.000
 we are only testing the app.

83
00:04:39.200 --> 00:04:42.500
 so, put down the password I like

84
00:04:43.800 --> 00:04:46.900
 Passwords. All lowercase.

85
00:04:56.800 --> 00:04:57.500
 and then,

86
00:05:00.100 --> 00:05:03.500
 Okay. Now, we are asked to save the

87
00:05:03.500 --> 00:05:04.700
 keypads database.

88
00:05:05.800 --> 00:05:08.500
 I'm going to save it on desktop, keep

89
00:05:08.500 --> 00:05:10.500
 the default name.

90
00:05:19.600 --> 00:05:23.100
 Just to give you an additional advice. I would recommend you

91
00:05:22.100 --> 00:05:25.800
 to write down that master password, somewhere

92
00:05:25.800 --> 00:05:28.400
 and store it in a safe place. Just

93
00:05:28.400 --> 00:05:31.200
 if you lose or forget that password, you won't be able to

94
00:05:31.200 --> 00:05:32.500
 access your database.

95
00:05:34.100 --> 00:05:37.500
 As you can see, here is the root. Here's the default group called

96
00:05:37.500 --> 00:05:42.000
 route. Let's create a new group entry, right-click

97
00:05:41.400 --> 00:05:45.900
 new group name. First

98
00:05:45.300 --> 00:05:47.200
 case.

99
00:05:48.500 --> 00:05:49.200
 You can even.

100
00:05:50.400 --> 00:05:51.800
 Define an icon.

101
00:05:53.300 --> 00:05:54.700
 Or use some other properties.

102
00:05:56.900 --> 00:05:59.400
 Here is our first case now

103
00:05:59.400 --> 00:06:02.400
 to add credential entries, right?

104
00:06:02.400 --> 00:06:02.900
 Click.

105
00:06:05.400 --> 00:06:09.300
 The perske, the first case space

106
00:06:08.200 --> 00:06:10.800
 new entry.

107
00:06:12.200 --> 00:06:15.300
 And we're going to add our first credential.

108
00:06:17.700 --> 00:06:21.300
 We'll put down the title, some

109
00:06:20.300 --> 00:06:24.100
 social network username.

110
00:06:25.400 --> 00:06:26.200
 John.

111
00:06:28.800 --> 00:06:32.400
 And for the password, we will use the

112
00:06:32.400 --> 00:06:34.500
 password generator.

113
00:06:35.800 --> 00:06:38.200
 Option. As you can see, you can choose a

114
00:06:38.200 --> 00:06:41.800
 password with the length, of course and

115
00:06:41.800 --> 00:06:45.500
 we use small uppercase lowercase

116
00:06:44.600 --> 00:06:47.700
 letters, numbers

117
00:06:47.700 --> 00:06:50.200
 and special characters and so on and

118
00:06:50.200 --> 00:06:53.400
 also a great feature is the passphrase which

119
00:06:53.400 --> 00:06:54.700
 I would really recommend

120
00:06:56.100 --> 00:06:59.500
 You can choose the word count. And as you can see,

121
00:06:59.500 --> 00:07:03.700
 the entropy here is increasing

122
00:07:03.700 --> 00:07:04.700
 or decreasing.

123
00:07:09.600 --> 00:07:12.600
 Usually five to six words is enough,

124
00:07:12.300 --> 00:07:15.400
 but more is better. Just

125
00:07:15.400 --> 00:07:18.700
 be sure that you're at your service

126
00:07:18.700 --> 00:07:21.300
 provider. Very, you are putting your

127
00:07:21.300 --> 00:07:22.000
 password in.

128
00:07:27.300 --> 00:07:30.400
 Has the ability to save a long password?

129
00:07:32.300 --> 00:07:34.900
 I will choose 7.

130
00:07:37.100 --> 00:07:39.900
 And let's see our password.

131
00:07:41.200 --> 00:07:44.800
 As you can see, also here you have an option word

132
00:07:44.800 --> 00:07:48.500
 separator. So it's pretty self-explanatory.

133
00:07:50.100 --> 00:07:50.700
 You see?

134
00:07:54.600 --> 00:07:56.200
 It's adding the separator.

135
00:07:59.800 --> 00:08:02.700
 You can add space whatever

136
00:08:02.700 --> 00:08:03.400
 you want.

137
00:08:04.800 --> 00:08:06.600
 We will leave it at the default.

138
00:08:13.400 --> 00:08:16.200
 So here is a password and press ok to

139
00:08:16.200 --> 00:08:16.700
 save.

140
00:08:21.700 --> 00:08:24.500
 Now when you run the app again keepass

141
00:08:24.500 --> 00:08:27.300
 will open the less database you used in

142
00:08:27.300 --> 00:08:30.200
 immediately asked for a master password. And

143
00:08:30.200 --> 00:08:33.500
 now after our note taking and password managing

144
00:08:33.500 --> 00:08:36.300
 section, we will continue our ocean journey by

145
00:08:36.300 --> 00:08:39.700
 covering search engines part of Open Source intelligence in

146
00:08:39.700 --> 00:08:41.500
 the next video. So see you there.