QUESTION: If someone acquires the master password for my password manager program, then they have access to all my accounts. How's this different than a single password for all accounts?
ANSWER: This is a common and legitimate question that often keeps non-technical users from incorporating a password manager, but it’s important to understand that cybersecurity is never about achieving 100% security as it’s just not possible.
Using 1password In Safari
The real focus needs are on evaluating the degrees of security based on a number of variables and whether you are in control of them or not.
Using the same password on all your accounts means that if any one of those accounts is breached, they are all at risk because the standard operating procedure for cyber-thieves is to try the same password on thousands of other sites.
You are also only as secure as the least secure site that uses the same password.
►Free password management: Here are options, including Apple, Google
►Dear passwords: Forget you. Here's what is going to protect us instead
Who’s in control?
Protecting the personal information that you provide to any company is totally out of your control.
Use password phrases (usually six or more words long) for the best security. Include capital letters, numbers and symbols if the app or site allows it. Change your passwords every three months.
The fundamental security enhancement of using a different password for every account should be fairly obvious to everyone, but not possible without some form of password management.
Protecting how you manage your passwords is one of the most important things to focus on, which goes to your question.
If you were to write down all your passwords and keep them in a very secure place, that would be preferential to using the same password on every account.
- I show you how to get started using 1Password password manager.
- With 1Password, you use a master password to access your vault across platforms but during setup you'll need that master password plus a security key. 1Password also boosts privacy by offering a.
- Android phones let you use Dashlane or LastPass to log in to your apps automatically, after making a few simple tweaks to your settings; 1Password can fill in your usernames and passwords with a.
- Browser-based password managers don't offer advanced features like these options in the paid 1Password utility. Likewise, free browser-based password managers lack a feature that's crucial for.
The key is to not make it obvious that the information is a bunch of passwords in the event someone else finds it.
1password Tutorial
Password manager security
When you incorporate a password manager, you only have to create, remember and protect one password.
It’s important to use a very long and complex password that you have never used before for the best chances of keeping it secure.
Most password management programs provide lots of additional layers of protection that you can set up that include 2-factor authentication and rules that deny access based on location, device or IP address.
When you add these additional layers of protection, even if an unauthorized person acquires your master password, they won’t be able to use it because they won’t have the necessary additional items to be fully authenticated.
You’ll also get a warning of a failed or blocked sign-in attempt, which lets you know to change your master password to be safe.
What if they get hacked?
Another common question about password management services is “what happens if they suffer a breach?”
Your passwords on all of the services are stored using powerful encryption, which means any breach of the encrypted data would require the hacker to spend time attempting to decrypt the information.
The service would automatically require you to reset your passwords, which would render the stolen information useless by the time it was decrypted.
Suggested programs
Using 1password
For many years, I’ve recommended LastPass because it offered lots of features in its free version of the program, but if you want to use it on both a computer and smartphone, it’s no longer free.
Another fee-based service that has lots of great features is 1Password.
Both services offer individual or family-based plans that range from $3 to $5 per month.
Ken Colburn is the founder and CEO of Data Doctors Computer Services, datadoctors.com. Ask any tech question at facebook.com/DataDoctors or on Twitter @TheDataDoc.
Using 1password With Safari
This article originally appeared on Arizona Republic: Here's how to protect your passwords using a password manager