Too many passwords to remember? Try using a password manager

LONDON — Everyone has too many passwords. The credentials we need to remember to navigate our online lives continue to multiply, not just for frequently used email, banking, social media, Netflix and Spotify accounts, but also, say, obscure e-commerce sites you’re not sure you’ll buy from again.

According to some unscientific studies, the average person has hundreds of passwords. That’s a lot to keep track of. You might be tempted to reuse them, but that’s one of the bad password habits that cybersecurity experts warn against.

Instead, use a password manager. They’ve been around for a while and can be a useful tool for keeping track of your credentials. But they can also be intimidating for people who aren’t tech-savvy.

Here’s a guide on how to use them:

Why use a password manager?

Many people simply use the same password for all their online accounts, mainly because it is the most convenient solution.

NO!

If your credentials are exposed in cyberspace, hackers may try to use the stolen passwords to access other services.

Other prohibited behavior: Using information that is easy to guess, such as birthdays, names of family members, favorite sports teams, or simple phrases like abc123.

Experts say the best strategy is to use a different password for each account—the longer and more complex, the better. You should also use two-factor authentication whenever possible.

But it’s impossible to remember all those different codes. So let a password manager do the work.

How does a password manager work?

The basic concept is simple: Your passwords are securely stored in a digital vault. When you need to access an online service, it automatically fills in the login and password fields. All you need to remember is one password to open the password manager.

Most password managers have a smartphone app that works with mobile browsers and other apps and can be opened with a fingerprint or face scan. If you’re using a computer, you can also log in to your password vault with a browser plug-in or by visiting the website.

A good password manager should be able to generate complex passwords with letters, numbers, and symbols, in case you’re creating a new account. It should also recognize that you’re logging in to an online service for the first time and ask if you want to save the credentials you entered.

Password managers can also help you avoid falling victim to phishing scams. Those deceptive emails from scammers who try to trick you into clicking a link to a fake website that’s designed to collect your login information? A password manager won’t autofill your information if the web address doesn’t match the address associated with your saved password.

They don’t just store passwords. You can store PINs for bank accounts and credit cards, for example. Many also support passkeys, a new technology that companies like Google are implementing as a more secure alternative to passwords.

How to choose the best one?

There are many password managers available on the market, so it can be difficult to choose the best one for you.

Some of the more well-known platforms include 1Password, Bitwarden, Dashlane, Bitdefender, Nordpass, Keeper, and Keepass.

Check out the many tech review sites that have done in-depth testing and ranked the most popular services. If you want to have fun, Reddit users have created spreadsheets with comparisons. The UK’s National Cyber Security Centre has a buyer’s guide.

Most services have free and paid versions. Paid options typically cost a few dollars a month, while free offerings have limitations, such as only allowing you to log in on one device at a time or limiting the number of passwords you can store.

If price is a factor, Bitwarden’s free service gets top marks from reviewers, although it’s less polished and not as intuitive to use.

A good password manager will work across devices and platforms, with apps for Windows and Mac computers and iOS and Android devices, as well as browser plugins for Chrome, Safari, Firefox, Edge, Brave, and Opera

There are also basic browser-based password managers, as well as Apple’s iCloud Keychain for Macs and iOS devices. The iPhone maker is aiming more directly at the market with a new Passwords app that will launch in the fall.

But are they safe?

Concerns about the cybersecurity of password managers have grown after one service, Lastpass, reported a security breach, leading experts to recommend avoiding the service.

Don’t let that discourage you. First, experts advise that saving your credentials in a password manager is much safer than letting, for example, e-commerce sites do it for you.

Good password managers use strong encryption to prevent third parties from accessing your data.

Many services use AES-256 encryption, which is considered the most secure and “impossible to brute-force crack using today’s technology,” said Pieter Arntz, senior malware researcher at cybersecurity firm Malwarebytes.

Strong encryption “ensures that even if your computer or password manager is compromised, an attacker can’t simply read all of your passwords because they are stored in an encrypted form and will need your master password to decode them,” Arntz said.

A good password manager should also conduct regular security audits and promptly notify users of any security breaches.

Many services store your data in the cloud. If you’re worried about this, some only let you store it on your local device, but that can be a complicated process.

___

Is there a technical challenge you need help with? Email us at [email protected] with your questions.

Stay up to date with business news by signing up to our Economy Now newsletter.