|KeePass Password Safe|
Use a Password Manager on PC, Android, and more.
Because remembering passwords can be a huge hassle, many people make the mistake of using a single password for multiple uses. That's a really bad idea because if one use is compromised, which happens all too often
, that compromised password can then provide access to other uses, contributing to identity theft
and serious harm
; e.g., your compromised social networking password giving bad actors access to your online banking.
The best way to protect against this risk is to use different, strong
passwords for different uses, so the compromise of any one use affects only
that one use. That may sound like a huge hassle, but it doesn't need to be: a Password Manager
can easily generate and manage lots of strong unique passwords. Then you only have to remember one strong master password
that you don't use for anything else
. Your other passwords are safely stored in a securely encrypted file. You can also increase security with multi-factor authentication
If you use more than one connected device (e.g., computer, tablet, smartphone), you can have your passwords available on all of them by storing your securely encrypted password file in a "cloud" storage service like Google Drive
, Microsoft OneDrive
, or DropBox
Password Managers can be either proprietary or open source. The problem with proprietary is that privacy and security cannot be verified
—you are instead relying on hope and trust
, and that's not
a good idea, as evidenced by weaknesses and compromises known and unknown
. By contrast, open source
software can be verified easily by experts and corrected or modified as needed or desired. So look for FOSS
(Free and Open Source Software).
Note: Be skeptical of reviews and ratings, especially on the Internet.
Most are not written by real experts. Many are just paid promotions.
This site receives no consideration for its recommendations.
Best Password Managers (FOSS)
Password Safe. Simple and basic. Written by expert Bruce Schneier.
- KeePass. Limited native functionality, but rich in plugins and ports.
- AuthPass. Compatible with KeePass. Has potential, but suffers from teething issues.
- Bitwarden. Slick, feature rich, and open source, but freemium and dependent on Bitwarden servers.
Better than Third Party
Strongly recommended. Do it. Today.