Get a Pentest and security assessment of your IT network.

Cyber Security

Password Manager Guide

TL;DR

Use a password manager to create strong, unique passwords for every account and store them securely. This is far better than reusing passwords or trying to remember dozens of complex combinations.

1. Why You Need a Password Manager

Reusing passwords across multiple sites is extremely risky. If one site gets hacked, attackers can use your compromised password on other accounts. Password managers solve this by:

  • Generating Strong Passwords: They create random, complex passwords that are difficult to crack.
  • Secure Storage: They encrypt and store your passwords safely.
  • Auto-Filling: They automatically enter your usernames and passwords on websites and apps.

2. Choosing a Password Manager

Several good options are available, both free and paid. Here’s a quick overview:

  • LastPass: Popular, feature-rich, offers a free tier and premium subscriptions.
  • 1Password: Highly secure, excellent user interface, subscription required.
  • Bitwarden: Open-source, very affordable, good security features.
  • KeePass (Local): Free, open-source, stores passwords locally on your computer – requires more technical setup and backup management.

For most users, LastPass or 1Password are excellent choices. Bitwarden is a good option if you prefer open-source software.

3. Setting Up Your Password Manager

  1. Download and Install: Download the password manager app for your computer (Windows, macOS) and mobile devices (iOS, Android).
  2. Create a Master Password: This is the only password you need to remember. Make it long, strong, and unique! Do not reuse this anywhere else.
  3. Install Browser Extension: Install the browser extension for Chrome, Firefox, Safari, or Edge. This allows auto-filling and password generation within your web browser.

4. Importing Existing Passwords

Most password managers allow you to import passwords from other sources:

  • From a CSV File: If you’ve previously exported passwords, import the CSV file into your new manager.
  • From Your Browser: Many managers can directly import passwords stored in Chrome, Firefox, or Safari.

The exact steps vary depending on your browser and password manager. Consult their documentation for specific instructions.

5. Generating New Passwords

When creating new accounts or updating existing ones:

  1. Let the Manager Generate: When prompted for a password, use the password manager’s generator.
  2. Password Length & Complexity: Aim for at least 12 characters, including uppercase and lowercase letters, numbers, and symbols. Most managers have default settings that are sufficient.
  3. Save Automatically: The password manager should automatically offer to save the new username and password. Confirm this prompt.

6. Using Your Password Manager

  • Auto-Fill: When you visit a website, the browser extension will recognize saved credentials and auto-fill them for you.
  • Password Checkup: Many managers offer a password checkup feature to identify weak or reused passwords.
  • Two-Factor Authentication (2FA): Enable 2FA on your password manager account for extra security. This adds an additional layer of protection beyond just your master password.

7. Keeping Your Password Manager Secure

  • Strong Master Password: As mentioned before, this is crucial!
  • Regular Updates: Keep the password manager app and browser extension updated to benefit from security patches.
  • Be Aware of Phishing: Be cautious of phishing emails or websites that try to steal your master password. Always access your password manager through its official app or website.
Related posts
Cyber Security

Zip Codes & PII: Are They Personal Data?

Cyber Security

Zero-Day Vulnerabilities: User Defence Guide

Cyber Security

Zero Knowledge Voting with Trusted Server

Cyber Security

ZeroNet: 51% Attack Risks & Mitigation