- How to keep your online accounts secure
- Why creating a strong password really matters
- Yes, you need a password manager. Here’s why.
- How adding your phone number and 2-factor authentication helps protect your account
- How can I review the security of my account?
Password managers let you easily create, save, and manage all your passwords which can help protect your online accounts.. Learn why you should start using one. To learn more about how you can keep yourself safe while on the Internet, visit: internet-safety.khanacademy.org. Created by Sal Khan.
Want to join the conversation?
- My question is if someone logs into my password manager, won't they have access to all my passwords?(15 votes)
- Yes, this is the Achilles heel of the password manager. To reduce this risk, password managers require that you have a very strong MASTER password that is almost impossible to guess. Password managers often have 2 Factor Authentication (which is when you need more than a master password, like a text to your phone or email) to be able to log in. Password managers are typically very strong on the server end and are super hard to crack into.(4 votes)
- How do you know if you can trust a password manager to not steal your accounts?(12 votes)
- Try looking up online reviews, look at the developer (if this is the only thing they've really made / they're from a shady place). If the manager has thousands or even millions of downloads, even if it does steal your information, the odds are very low that they will actually use it against you. Probably will just sell it for money. Some safe ones to use are Bitwarden, Dashlane, and NordVPN (the former of which is free and the other two are not).(12 votes)
- But what if someone got into my mobile device?
Wouldn't they get into all my accounts if I had a password manager?(8 votes)
- This may depend on what password manager you are using, but most password managers require a password or biometric authentication every time you open it. So even if your mobile device was unlocked and someone was able to access it, they wouldn't be able to access your password manager.(2 votes)
- What are the chances of a password manager you use getting hacked? Because that would leak all of your (and probably a lot of other users) passwords to the hacker.(3 votes)
- I don't know about other password managers, but the one I use is called 1Password. It saves all your passwords, but you need one password that you can remember on your own to unlock. So as long as that one password that you remember is strong, your passwords should be safe.(3 votes)
- how do i trust anyone(4 votes)
- So what I'm understanding is that I'll get hacked if I don't use a password manager.(2 votes)
- Would it be smart to type out my passwords on a google document to remember all of them?(3 votes)
- Kinda because what if you accidentally share it then whoever you shared it with can hack you.... and also let's just say that there is a project that you want to share with a online friend what if you share the wrong thing but I guess it could be fine(3 votes)
- what do you do when you forget your passwords and you don't have password managers?(2 votes)
- Many websites have a "forgot a password" feature. If not, you should try to find their customer support center. If they don't have one, you can either make a new account or give up the website (if it is missing those essential features then it probably isn't very well-made).(5 votes)
- Any recommendations for a trusted password manager?(2 votes)
- Some good password managers include Bitwarden and Dashlane, both of which are free. NordVPN is also a good one, but that one is paid.(3 votes)
- So Guemmy, you're... Which I agree with. You're telling us to have hard to break into passwords. But then the obvious question is how does a normal human being manage all of these passwords, that don't have regular words in them? They can't reuse the same password over and over. How do we manage all of this? - Yes, great question. It is really hard to keep up with all of the different services. I don't know about you, but I use over a hundred services, and the only reason I know that, (Sal and Guemmy laugh) is actually because I've used a password manager, and seeing the list actually surprised me. Password managers are great, because they can automatically save the passwords for you. And they're super convenient, because once you go back to a website, not only do they check that it's not like a phishing website or somebody pretending to be the legitimate website, but they'll also conveniently fill in your password for you, and you just click a button. And so it's super quick, especially if you're on mobile. It's been a lifesaver. One thing that I've always worried about password managers, is sometimes I'm logging in from my laptop, sometimes from my phone, sometimes from my wife's laptop, will the password managers work across multiple devices? - Yeah, different password managers definitely have different capabilities, but at least on Google, when you're signed into your Google account, on the various devices, then yes, we can pull together all of the information, from that password manager, and display it on the different devices that you're using. - And how do you compare a password manager, which can kind of store all of these things locally, and be able to fill in when you need it, and keep track of it. To being able to use a service. You know, obviously Google has it, you have Apple, You have other folks, who have once you sign into that account, that allows you to sign into other accounts. Do you recommend both? How do you compare those two things? - I think it's up to the user's choice, and so sometimes users are going to be limited because of what the website developer has done. For example, not all websites offer the sign in with Google, with Apple, sign in with Facebook, et cetera. But all websites do have passwords, and so at a minimum you can always have your own username, and password for that service, and then store it in the password manager. Alternatively, if you don't wanna create, a bunch of new accounts all over the internet, you could definitely use your Google account for instance, and sign in into various services using your Google account. I personally like that option because it actually reduces the number of different accounts I have to worry about. And I mean of course Google is backed by the strongest security, among the strongest in the industry, so it's something that I feel good about. - Thanks for that Guemmy.