Another vote for "Keepass". Does everything you're asking and it's free and lightweight.

Regards,

Ray.

It depends entirely on the authentication system. Consequently those systems should state *exactly* what constitutes a valid password. In particular they should state which characters are valid.

At one site I submitted a password containing a '#' character. When I returned to login again I found that my password didn't work. Surely the '#' hadn't been interpreted as the start of a comment? So I tried the password again minus the characters from the '#' onwards. It worked! The idiot who had implemented the authentication system was parsing the password somehow, maybe in a scripting language. Yikes.

I regularly use 12-character passwords containing special characters as well as alphanumeric characters. Except backslash ('\'). Even I dare not use a backslash!

I keep my passwords in a simple text file which is then encrypted with GPG. I would never decrypt it on any machine but my own.

Edited by linux (Mon 21-May-07 12:49:15)

I've used u3 myself but I prefer a standard key as not all u3's are vista compatible and I don't see the point in firing up u3 software when I just want to run the password safe.