Which password Manager? LastPass hacks causing big losses? more info...

[GoldenVision]

I'm happy to have quit LastPass after the first scare - Bitwarden had proved very capable and works well on my android as well as the windows laptop.

 

[Burgo]

I think this all goes to show we need something different to passwords and the way they are used.
Access security has two fundamental principles, which should always be divorced:
1) Authentication. The "Are you who you say you are?" element.
2) Authorisation. The "Given you are who you say you are, what are you allowed to do?" element.

The problem is that in order to save money / lack of analysis, these are usually combined into one device - a password.
Which once breached allows access to everything.

 

[OldCodger]

I think this all goes to show we need something different to passwords and the way they are used.
Access security has two fundamental principles, which should always be divorced:
1) Authentication. The "Are you who you say you are?" element.
2) Authorisation. The "Given you are who you say you are, what are you allowed to do?" element.

The problem is that in order to save money / lack of analysis, these are usually combined into one device - a password.
Which once breached allows access to everything.

Pass keys seem to be the next big thing

The beginning of the end of the password

We’ve begun rolling out support for passkeys across Google Accounts on all major platforms as an additional option that people can use to sign in.

blog.google

 

[herald_400rl]

We use 1pass enterprise, the AzureAD (Entra) sync and SSO makes it worthwhile.

 

[Howard B]

How Secure are your passwords ?

Everyone should be using some facility to record your passwords.
(And not a note book you carry around with you!!! or a spreadsheet called 'passwords')

LastPass, BitWarden NordPass, Keeper, Dashlane, RoboForm, 1Password and others are all good, all have advantages and disadvantages.

All are very very 'secure' to a degree, arguably some are more secure than others, but every time one has a breech all the others ensure that can not be breeched in the same way.
So one may suggest the one that has most recently suffered a breach is currently the most secure.

View attachment 808175

Useful that, all my passwords are 10-14 long with upper/lower case letters numbers & symbols. Suspect as AI improves it wont take so long to crack them.

^{_{Subscribers  do not see these advertisements}}

 

[ceejayt]

I use 1Password -works on mobile and laptop - seems very secure.

I read an article recently that said a password consisting of three random words is as good as many other passwords

 

[Elsie2010]

My password manager is the 'forgotten your password' button
Never have to store or remember a single password