Passwords. PIN codes. A painful necessity for living in the internet connected world. Passwords are needed for:
- Home computer
- Work computer
- Mobile Phone – Apple iPhone, Samsung Galaxy, Google Pixel, Huawei, Nokia
- Tablet – Apple iPad, Samsung Galaxy Tab
- Personal email – Gmail, Yahoo!, Hotmail, Outlook.com
- Work email
- Work Intranet
- Work Email Archive – Veritas / Commvault / Mimecast
- Work AntiSpam/Screening – Mimecast / TrustWave / Proofpoint / Checkpoint
- Online Storage – OneDrive / Dropbox / Box / Crashplan / Carbonite
- Apple ID / Google Play / Blackberry MMS / Windows Store
- Internet Banking
- Sporting Club – Football/Soccer/Hockey/Tennis/Golf/Cycling…
- Primary / Elementary / Secondary / College / TAFE / University news portal
- Online retailer(s) – think Sears, Coles Online, Target, Tesco, Aldi, Marks & Spencer, Walmart, H&M, Zara…
- eBay / PayPal / Greys Online / Craigslist
- Uber / AirBNB
- LinkedIN / Facebook / Twitter / Pinterest / Instagram / Snapchat
- Twello / Keep / Evernote / Asana
- Zoho / Pipedrive / Salesforce / Sugar CRM
- Airline Frequent Flyer Program website login
- Government Website – Social Security / Health / Tax
How many did you recognise above? No doubt there are other platforms not shown, that you access, to carry on your digital/real life.
With the average person having dozens to hundreds of passwords, this is a challenge for anyone to manage and remember. The biggest problem with the above is that everyone ends up reusing their passwords.
People can’t cope with the depth and complexity of thinking about different passwords depending on what they are trying to access. Someone might have 80 different logins, but end up with only 7 different passwords to cover all of the aforementioned sites.
Not that Secure. If one site gets hacked, based on the example above, there is an average of 12 other potential sites to hit, with the same password. This would take a computer (think the mobile phone you’re reading this on now) only a few seconds to smash and login. That’s the reality of modern day password cracking. So, what to do? Create a unique, complex password to each site. Than it becomes a problem to remember them all.
Enter Password Safe Software.
The premise of password safes is that they exist to capture all the dozens to hundreds of passwords you have and make it easier for you to NOT have to remember all of them by sealing them behind a single “master password”.
The things to look for when assessing a password safe:
- Security. All good quality password safes will explain in detail how they go about securing your data. The more information they disclose, the higher the likelihood that they are confident and have tested the product exhaustively. Being transparent in their architecture and security methodology also invites comment, further promoting and reinforcing their own security posture.
- Ease of use. Underrated. No point in buying something that so difficult to use, you end up not using it. Lots of the good quality managers will let you download a trial which is either time limited e.g. Full functionality for a set period of time and than it locks out, requesting an upgrade or designed to only offer partial functionality e.g. Only save 5 passwords, before asking you to upgrade.
- Features. A lot of password managers have other features like automatically logging you into sites, generating random passwords, having secondary logins for emergency contacts to gain access after a set period of time or features aimed at the business market to allow password sharing with work colleagues. Choose what suits you.
- Compatibility. Ideally you want a password safe that works on Microsoft Windows, Apple iOS, has browser extensions for Internet Explorer/Edge, Chrome, Firefox, mobile phone & tablet across iOS & Android.
- Price. This is a complicated one. Free or paid? Both have their benefits, both have their detractors. Generally speaking, when it comes to security though, you should pay for it.
Password Safes to have a closer look at:
- Norton Identity Safe https://identitysafe.norton.com
- Dashlane http://www.dashlane.com
- Keeper http://keeper.com
- Intel Truekey https://www.truekey.com
- 1 Password https://1password.com
- Keepass https://keepass.info
- Bomgar https://www.bomgar.com
- Last Pass https://www.lastpass.com
Further reading:
How to Pick a Password Manager
https://www.csmonitor.com/World/Passcode/Security-culture/2016/0930/How-to-pick-a-password-manager
Dashlane Password Manager Guide to Selecting a Password Manager
https://blog.dashlane.com/the-essential-2017-handbook-to-choosing-a-password-manager/
Passwords & Encryption
https://bendodson.com/weblog/2013/01/06/passwords-and-encryption/