Opinion - What are your thoughts on password managers? Do you use one? Would you recommend it to others?

You're viewing a single thread.

1K comments

I can’t imagine life without one. So many bad password habits can be eliminated by using a password manager to generate a strong, unique password for every site you use, and devoting your limited password-remembering powers to one decent master password. (Or better yet, secure your password manager further using other forms of authentication.)
It’s not just for helping you (and your less technically inclined friends and family) remember and use strong, unique passwords, though. Since a password manager only recognizes the real web address that any given password was designated to, it won’t be fooled by a scam website using a similar-looking name to a legitimate one. While this doesn’t eliminate the risk of falling for a scam, every little bit helps, no matter how skilled you are at cybersecurity.
I use Bitwarden, which I’ve been using ever since Lastpass started limiting you to using a single device class (mobile or desktop) for free accounts. It integrates with both Firefox and Chromium-based browsers and with the password manager features in smartphones. Their free account is nice, but I went with the paid option so that I could keep and use 2FA passcodes within Bitwarden itself. There have been several debates between doing it like this versus using a separate authenticator app, but I feel like it’s both very secure and really, really convenient. It encourages me to use increased security on every website that supports it.
- Fellow bitwarden user here. I absolutely agree that it is one of the best password managers it there and even the premium is quite reasonably priced.
  I wanted to ask about your reasoning for using the 2fa inside bitwarden though. What benefit do you believe you're getting by using this as opposed to just disabling 2 fa for those sites?
- I've been saved a couple of times from scam sites. Couldn't figure out why bitwarden didn't find a password for a site I use regularly, only to discover, I wasn't on the site I thought I was on
- good point about scams. I've been using keepassxc with the browser extension and it works really, really well too.
- While this doesn’t eliminate the risk of falling for a scam, every little bit helps, no matter how skilled you are at cybersecurity.
  It's the swiss cheese approach.
  One slice of cheese can be passed through easily, because it has holes in it. Put several slices together and the holes start getting covered up by the non-hole parts of the other slices.

1030 comments