Chapter 3 of 10All chapters
Chapter 3 of 10
Password managers
The practical answer.
How they work
A single strong master password unlocks an encrypted vault. The provider stores ciphertext it cannot read, so a breach of their servers does not expose your passwords.
- Autofill refuses lookalike domains, which quietly blocks phishing.
- Browser built-in managers are far better than reuse.
Choosing and using one
Pick one that has been independently audited, set a long master passphrase you can remember, write emergency access details on paper, and store them somewhere safe.