Password managers / Guide

Objective

• To provide guidance on password managers and to provide recommended options for which one to use

About Password Managers

What is a password manager?

• A password manager is a computer program that allows users to store, generate, and manage their passwords for local applications and online services. It assists in generating and retrieving complex passwords, storing such passwords in an encrypted database or calculating them on demand.

Is it safe?

• Password managers are designed to be secure. They are encrypted, with the ability to decrypt it being locked behind a password or some other method of authentication, with many offering the ability to use multi-factor authentication. What that means is that no one other than you can access your passwords, not even the companies that make the password managers.

Advantages of using a password manager

• You don't have to memorize all your passwords. You only need to remember a single secure master password that unlocks your password vault. Because of this, you can use passwords that are much more complex than you would otherwise be able to if you had to memorize them.
• Many password managers can auto-generate highly secure passwords for you.
• Many password managers can save time by auto-filling credentials for faster access to online accounts.
• Many password managers allow you to access your password vault anywhere, from any device.

Recommended Password Managers

• We recommend the following password managers:
  • BitWarden
  • LastPass

Comparisons

Similarities

• Have an encrypted "vault" in which to store unlimited passwords, notes, files, card information, and more
• Have the ability to search, add, edit, view, delete, and otherwise manage vault items
• Automatically sync across devices
• Have the ability to auto-generate secure passwords for you
• Have the ability to auto-fill passwords
• Have the option for use of multi-factor authentication

Differences

• Multi-factor authentication options
  • BitWarden: Includes five options, two of which are free
  • LastPass: Includes nine options, six of which are free, including one that can be used and kept offline
• Device sync
  • BitWarden: Can sync between all devices
  • LastPass: Free version can sync between all desktop or all mobile devices, but not both. Paid version can do both.
• Account recovery upon forgetting master password
  • BitWarden: Account recovery options are extremely limited.
  • LastPass: Account recovery options are more prevalent (though it's still possible to lose access completely).

Notes

• Learn more about Password Managers: https://www.youtube.com/watch?v=CtOh1-TUabU