IT Security Awareness Day October 19, 2016 Password Manager Software – Tom Tenley

What is a Password Manager? A modern Password Manager is a browser extension (Chrome, Internet Explorer, Firefox, Safari, etc) or an App on your Smartphone.

Basic Features Remembers and fills in your login and password information for each site Can create strong, unique passwords for you for each site AND REMEMBER THEM Protect you from phishing attacks or mistyped URL’s Protect you from keyloggers

Advanced Features of Some Password Managers Import passwords from browser / Export to text or XML file Create Secure Passwords, letting you select password length (min 13 characters recommended) Form fill – credit card, address, etc Securely store other information – medical or insurance info, software serials, etc Works across all platforms/devices

Enhanced Safety Better than: Keeping passwords on a piece of paper or as a text file on computer Using browser (web attack, theft, the password manager can’t fill forms or save other info)

LastPass as an Example of a Password Manager Works on all devices (Windows, OS X, Linux, Android, iOS, Windows Phone) ONE master password to remember Automatic sync across all devices via cloud securely NOT using third party sync Accessible ONLY by you Browser integration Password ONLY known to you. LastPass cannot provide even under court order https://lastpass.com/

Using Lastpass Lastpass uses your email address and ONE Master Password for access Default install is for LastPass to remember your email address (OK) AND your Master Password (uncheck that option) Choose a strong Master Password (random characters, number, symbols) Keep master password stored offline somewhere, no way to recover without it

Using LastPass LastPass also safely and securely lets you use your login credentials from an untrusted computer such as a friend’s computer or a computer at a library.

LastPass Help Help is available by: 1. Online / downloadable user manual 2. Official video tutorials 3. Unofficial YouTube video tutorials posted by user community

Lastpass Cost Completely operational version for use on desktop or laptop is free For use on a mobile device (smartphone or tablet) is $1/month

A Note About Passwords A Strong Password Can Still Be Stolen Passwords stored improperly on the host website may be easily compromised. Possibility of “inside job” or spear phishing Really important to not reuse passwords! Insist on two-factor authentication on “high value” sites – Email, Financial, Medical, etc

Questions and Discussion 1/10/2018 UNIVERSITY OF WISCONSIN