Why are password managers considered good security practice when they provide a single entry for an attacker to get all of your credentials?
In: 21390
What are the chances that the average internet user can use a strong, completely unique password for every online account they create and remember all of them in their head? Literally zero.
People will instead either use the same password everywhere or write them down on notes next to their computer or in their notes app, all of which are *very* insecure.
A good password manager has a ton of advantages:
* It encrypts all your passwords using a master password and other forms of authentication (like fingerprint) so leaking all of them is very unlikely
* It has a built-in strong password generator
* It has browser autofill which validates the URL of the page you are on, so you won’t accidentally enter a password on a phishing site which resembles the real one
* Services which store your passwords in the cloud still don’t have access to them in plain text. The encryption key never leaves your device, so even if their databases get leaked your passwords won’t be exposed.
Overall, while keeping all your passwords in the same place does have some amount of risk, the advantages greatly outnumber it.
Latest Answers