Why are password managers considered good security practice when they provide a single entry for an attacker to get all of your credentials?

Question

Why are password managers considered good security practice when they provide a single entry for an attacker to get all of your credentials?

In: Technology

Answer 1

Because most people (read:all) have a finite amount of memory for passwords, so they end up having the same username(email)/password for everything, and most people passwords are very easy to crack via brute force. For example the password “HelloThere123!” would take a modern computer 16.07 seconds to crack by brute force.

So in the event of a data breach, all of their accounts are now out there.

A password manager however lets you remember one, very strong password and then the manager can remember the rest. E.g – “I Come From A Land Down Under” would take a modern computer 60 triilion years to crack by brute force. So as long as you don’t give it out and the password manger service you use doesn’t get breached, you are safe.

There are also password manager services that literally don’t store your password, so the risk of them being breached doesn’t exist.

I hope this helps.