From Lifehacker:
It seems like every day there’s news that a new site or service has been hacked. The intruders make off with usernames and passwords, and even if they’re encrypted the service forces users to change them. This week it was DreamHost, and last week it was Zappos.
We’re big fans of LastPass, a cross-platform password manager that helps you create and manage secure, unique passwords for every site, but the point of failure is obvious: What happens if someone gets your master password? Here’s how you can beef up LastPass by turning a USB flash drive into a key you have to plug in to your computer before you can access your passwords. This way, the next time a service you use has been hacked—even if it’s LastPass—you won’t worry.
If you’re not already using LastPass to generate, maintain, and manage different and unique strong passwords for every site and service you use on the web, it’s time to get started. The beauty of LastPass is that it’s available for Mac, Windows, Linux, and even mobile devices, and you can choose and remember one strong password and then use that password to manage and access all of your other logins and services on the web. Still, LastPass keeps all of your passwords in the cloud, and while they’re as secure as they possibly could be, if someone gets a hold of your LastPass password, you’re pretty much screwed, right? Not if you have a spare USB drive with Sesame, a utility that turns your USB key into an actual key needed to unlock your LastPass vault. Once installed and set up, you’ll need both your LastPass master password and your key plugged into your Mac, Windows, or Linux PC in order to unlock your vault and access your saved passwords.
Read more