Challenges of using a password manager

Initial setup and learning curve

Getting started with a new app can be stress-inducing, but LastPass makes password management as easy as possible. With LastPass, it’s as simple as signing up, downloading the LastPass browser extension or mobile app, logging in, and start saving your passwords. Save a password once and we’ll autofill it the next time you need it.

Dependency on a single master password

A single master password may sound like too little security for a password manager app, but it’s the essential key to protecting your account. That’s why it’s important to create a memorable, unique password only you will remember: one, so hackers will never be able to guess it, and two, so you’ll never forget it.

Best of all, once you’ve input your master password to verify one of your devices, you can establish passwordless login. This will allow you to log in, in all future instances, using the LastPass Authenticator app, your fingerprint, or a hardware key. While you’ll need to remember your master password, you can feel good about not typing it every time you access your LastPass vault.

Potential risks of cloud-based storage

Some worry that cloud-based storage could put your online accounts at risk of hackers. But the truth is that your data is secured within the cloud. The LastPass zero-knowledge encryption model, with hashing and salting, protects your LastPass password vault and data by never storing it in its plaintext form. Rather, it’s saved as unintelligible, scrambled gibberish which can only be unencrypted on your devices.

Types of password managers

Cloud-based password managers

Cloud-based apps are password managers which store your passwords in encrypted cloud servers. Your passwords are accessible only on your trusted devices, which are the only devices which can access and verifiably unencrypt your data from the cloud. These include LastPass, 1Password, Nordpass, Dashlane, and others.

Local password managers

Local password managers, like Enpass and KeePass, store your passwords locally to your device. Unlike a cloud-based password manager, your data does not sync across multiple devices with a local password manager: your passwords are only available on the device they’re saved on.

Browser-integrated password managers

Browser password managers are password managers that are built into the browser itself, like Safari, Chrome, Edge, and Firefox. While convenient, they’re not as secure as other types of password managers due to their lack of high-end security protocols.

Best practices for password management

Creating strong and unique passwords

You should create a strong password every time you make a new account. It’s one of the simplest ways to secure your account, as weak passwords are the easiest entry point for hackers. To create a unique password, use the built-in LastPass password generator.

Regularly updating and changing passwords

It’s a good idea to update your passwords every so often. Making it a habit protects against compromised accounts and potential data breach risks. It’s also smart to do when you first create your password manager account, as you may realize you’ve been using reused and weak passwords.

Enabling multi-factor authentication

Multifactor authentication adds an additional layer of security to your LastPass password vault by putting another layer of authentication on top of your master password. Whether it’s a push notification to your phone, a one-time password, or a fingerprint verification, it’s a simple way to protect your sensitive information, as you’ll be the only person who can authenticate your identity and unlock your password vault.