1. IT Security Awareness Day October 19, 2016
Password Manager Software – Tom Tenley

2. What is a Password Manager?
A modern Password Manager is a browser extension (Chrome, Internet Explorer, Firefox, Safari, etc) or an App on your Smartphone.

3. Basic Features
Remembers and fills in your login and password information for each site
Can create strong, unique passwords for you for each site AND REMEMBER THEM
Protect you from phishing attacks or mistyped URL’s
Protect you from keyloggers

4. Advanced Features of Some Password Managers
Import passwords from browser / Export to text or XML file Create Secure Passwords, letting you select password length (min 13 characters recommended) Form fill – credit card, address, etc Securely store other information – medical or insurance info, software serials, etc Works across all platforms/devices

5. Enhanced Safety Better than:
Keeping passwords on a piece of paper or as a text file on computer
Using browser (web attack, theft, the password manager can’t fill forms or save other info)

6. LastPass as an Example of a Password Manager
Works on all devices (Windows, OS X, Linux, Android, iOS, Windows Phone)
ONE master password to remember
Automatic sync across all devices via cloud securely NOT using third party sync
Accessible ONLY by you
Browser integration
Password ONLY known to you. LastPass cannot provide even under court order

7. Using Lastpass
Lastpass uses your address and ONE Master Password for access
Default install is for LastPass to remember your address (OK) AND your Master Password (uncheck that option)
Choose a strong Master Password (random characters, number, symbols)
Keep master password stored offline somewhere, no way to recover without it

8. Using LastPass
LastPass also safely and securely lets you use your login credentials from an untrusted computer such as a friend’s computer or a computer at a library.

9. LastPass Help
Help is available by: 1. Online / downloadable user manual 2. Official video tutorials 3. Unofficial YouTube video tutorials posted by user community

10. Lastpass Cost
Completely operational version for use on desktop or laptop is free
For use on a mobile device (smartphone or tablet) is $1/month

11. A Note About Passwords A Strong Password Can Still Be Stolen
Passwords stored improperly on the host website may be easily compromised.
Possibility of “inside job” or spear phishing
Really important to not reuse passwords!
Insist on two-factor authentication on “high value” sites – , Financial, Medical, etc

12. Questions and Discussion
1/10/2018
UNIVERSITY OF WISCONSIN