Password Managers

This is an easy topic to explain, but it did not seem to fit into another section.

• It is common for individuals and teams to use the same account and password for many accounts they have. Another habit to use the same username, but slightly change the password each time a new account is made on a new application, or website, etc. The problem is if a bad actors gains your password, they can then log into any other accounts you may have. Or they can easily brute force additional passwords.

• Use a password manager. Create different, complicated password for every account. We all have many accounts for multiple email accounts, websites, cryto sites, retails site, and so on. But you can use a password manager to maintain your encrypted passwords. Then create another unique password for the password manager. That is then what you routinely use.

  • Examples: Lastpass, Keypass, bitwarden, 1password, and Dashlane.

• Be careful with using password managers, as you would with any other application. For example, Lastpass released that they had user data compromised. I believe that Bitwarden (and possibly 1password) has self hosting.