A password manager is a software application that helps a user store and organize passwords. Password managers usually store passwords encrypted, requiring the user to create a master password; a single, ideally very strong
password which grants the user access to their entire password
database. Some password managers store passwords on the user's computer
(called offline password managers), whereas others store data in the
provider's cloud(often called online password managers). However offline password
managers also offers data storage in users's own cloud accounts rather
than provider's cloud. While the core functionality of a password
manager is to securely store large collections of passwords, many
provide additional features.
Advantages:
The advantage of password-based access controls is that they are easily incorporated in most software using APIs available in many software products, they require no extensive computer/server modifications, and that users are already familiar with the use of passwords. While passwords can be fairly secure, the weakness is how users choose and manage them, by using:- simple passwords - short in length, that use words found in dictionaries, or don't mix in different character types (numbers, punctuation, upper/lower case), or are otherwise easily guessable
- passwords others can find - on sticky notes on monitors, in a notepad by the computer, in a document on the computer, whiteboard reminders, smart device storage in clear text, etc.
- the same password - using the same password for multiple sites, never changing account passwords, etc.
- shared passwords - users telling others passwords, sending unencrypted emails with password information, contractors using same password for all their accounts, etc.
- administrative account logins where limited logins would suffice, or
- administrators who allow users with the same role to use the same password.



0 comments:
Post a Comment