Passwort-Manager

Password managers are programmes that help you meet secure password requirements: use a unique, complex password with as many characters as possible for each user account, consisting of letters, numbers and special characters. As the name suggests, password manager programmes take care of managing these unique passwords. Users then only need to remember one complex password – the one for the password manager.

 

What exactly does password manager mean?

 

About passwords in general:

  • Your password security is essential for the security of your data, accounts and cyber security. Anyone who knows your relevant passwords can, among other things, make purchases at your expense, steal your data and misuse your computer for criminal purposes.
  • Why unique passwords are so important: Time and again, providers such as online shops have their data stolen in cyber attacks. Login data records are particularly sought after. This is because they reveal which passwords belong to which user names or email addresses. This allows cybercriminals to log into the respective user accounts. Using a technique known as credential stuffing, cybercriminals can also quickly and automatically check whether they can gain access to user accounts with other providers using the same combination. Using a different password for each user account prevents this technique from working.

 

Why complex passwords are so important:

The longer and more complex a password is, the longer it takes to crack it statistically. In many attacks by cybercriminals, time is an important factor – the time it takes for their attack to be noticed and repelled. The longer it takes to guess your password, the more likely it is that cybercriminals will have to abandon their attack before they can guess it.

 

On the subject of password managers:

  • All user names and passwords are stored in the password manager programme. You no longer need to remember them. If you want to log in to a provider, all you need is the master password for your password manager.
  • Be sure to choose a highly secure master password. Ideally, it should be at least twelve characters long and contain upper and lower case letters, numbers and special characters.
  • Good password managers offer two-factor authentication. If possible, use this to further increase your security, especially for sensitive user accounts.
  • Many good password managers offer helpful additional features. For example, they help prevent duplicate passwords from being saved and assist you in creating secure passwords. Some check whether your data is on known lists of stolen login details, in which case it needs to be changed.

 

There are different types of password managers. Two important differences:

  1. There are standalone password manager programmes and password managers that are included in another programme, such as your browser. Assessment: Since browsers are complex programmes, even the best ones contain many potential security vulnerabilities. This means that your passwords are exposed to a relatively higher risk. It is considered safer to use a good, standalone password manager programme.
  2. Some password managers store your passwords on your computer. Others store them on the programme provider’s servers or in a cloud. This allows the password manager to be used on several different devices belonging to the same user. Assessment: In principle, a responsibly protected computer offers less opportunity for attack than external servers or a cloud and is therefore considered more secure. However, if a user uses multiple devices, it is still safer to use the same good password manager with externally stored data for all devices than to use the same passwords for multiple user accounts. The decisive factor is the security of the solution that can be used consistently, not the security of the ideal solution, which does not prove itself in everyday use and ultimately leads to risky behaviour.

 

Where do I encounter the topic of password managers in my everyday work?

Every time you create an (online) user account with password protection. Every time you log in and have to enter a password.

 

What can I do to improve my security?

  • Use a good password manager. Ask your IT department or an IT security service provider such as Perseus to recommend a reliable programme.
  • Choose a highly secure master password for your password manager. If possible, use two-factor authentication, at least for sensitive accounts.
  • Protect devices on which you use a password manager with a secure password or PIN.
  • If you use a password manager that stores your passwords externally, check the location of this storage and the privacy policy of the programme provider. If necessary, consult your IT department or an external IT security service provider such as Perseus. As a general rule, if you are unsure, choose a different programme.

 

Further information