Password Manager

Description

Eliminates password reuse that enables credential stuffing.

Centralized vault uses a master password or biometrics for access.

Available as application, browser extension, or enterprise solution.

Reduces phishing risk because autofill only works on legitimate domains.

What people often say

• If the master password is compromised, all passwords are at risk — MFA is mandatory.
• Cloud password managers are generally more secure than local ones due to better security auditing.

Covers / does not cover

Covers

• Strong password generation
• Preventing password reuse
• Secure credential sharing within teams

Does not cover

• MFA — a password manager is not a replacement for a second factor
• Protection from keyloggers capturing the master password
• Compromised passwords already present in data breaches