What is the crowd's opinion of Password Gorilla?

From 3.5 billion comments

• Use a password manager, but not one built into any browser or os (for mobility)
• The Access password to the password manager should be unique
• The individual password should also be unique (if not completely random)
• Backup your encrypted password database (multiple locations)

Recommendations: Passwordsafe and Keepass seem to be the most popular open source projects out here. Newest versions of Keypass requires a specific version of .Net to be installed on any machine that uses it, which might be a hinderance. Passwordsafe has a derivative project called Password Gorrilla that focuses on cross platform capabilities. There are even passwordsafe compatible versions that will work on a mobile OSs also.

Yup, I'm with you. It's very hard to rationalize using closed source security when open source alternatives exist. Personally I use PasswordGorilla for this reason (among a few others, like PasswordGorilla is written in Tcl/Tk so it can run on damn near anything).

https://github.com/zdia/gorilla/wiki

Password Gorilla – a cross-platform password manager

The Password Gorilla helps you manage your logins. It stores all your user names and passwords, along with login information and other notes, in a securely encrypted file. A single “master password” is used to protect the file. This way, you only need to remember the single master password, instead of the many logins that you use.

If you want to log in to a service or Web site, the Password Gorilla copies your user name and password to the clipboard, so that you can easily paste it into your Web browser or other application. Because the password does not appear on the screen, Password Gorilla is safe to use in the presence of others.

The convenience of Password Gorilla allows you to choose different, non-intuitive passwords for each service. An integrated random password generator can provide one-time passwords, tunable to various services’ policies.

Password Gorilla is a Tcl/Tk application which can run on Linux, Windows and Mac OS X. The source files written are supposed to be compatible between platforms. They are tested to run on Linux kernel <= 2.6.30.5, Windows XP, Windows 7 and Mac OS X 10.6.x/Lion So it is possible to work with this password manager in heterogeneous environments. The Password Gorilla generated database is besides compatible to actual Password Safe 3.2 databases. The password is SHA256 protected and the database contents are encrypted with Bruce Schneier’s Twofish algorithm. Brute force attacks are prevented by key stretching.

I don't use an on-line service. Honestly, I don't trust 'em: a) to keep my data secure, b) to be accessible when I need/want, c) to stay in operation.

I started using PasswordSafe years ago. I've since switched (almost) exclusively to Linux. I still keep my data in PasswordSafe format (*.psafe3), but I use PasswordGorilla.

The source for the iOS version is available for download at the author's site, so I guess you could compile it yourself if you were so inclined.

However, it appears that isn't the case for the Mac version - you'd be stuck paying the $15 if you wanted the one from the app store. Though, there are other compatible programs. For example, Password Gorilla has a Mac version. I've never used it on Mac, but I used to use it on both Windows and Linux before the Linux port of PasswordSafe was available.