Overview
A password manager is an application that stores and organizes login credentials and related data in an encrypted location. Instead of remembering multiple unique, complex passwords, you only need to remember a single master password.
Why Use
- Eliminates reusing the same password across multiple sites which is dangerous, if one site is breached, all accounts are vulnerable
- Eliminates simple, easy to guess passwords by autogenerating strong, random complex passwords
- Eliminates writing passwords down on paper or saving in unencrypted documents
- Eliminates using the "forgot password" feature constantly
- Eliminates typos by auto-filling in credentials
Best Practices
- Only use reputable password managers approved by IT
- Use a strong master password. Make it long and memorable. If you forget it, you lose access to your password vault.
- If the manager allows, enable two-factor authentication (2FA) which will protect your vault even if your master password is compromised.
Password Managers- KeePass is deployed to all staff computers
- Bitwarden is deployed for IT staff
KeePass
KeePass is an open-source, locally managed password manager.
At PLS:
- KeePass is installed automatically on all staff machines.
- Each user maintains their own password database file (.kdbx).
- IT can assist with configuration and backup, but only you can unlock your vault.
KeePass Basics
- Open KeePass from your Start menu or desktop shortcut.
- When prompted, create a new database, save it to your OneDrive, and set a strong master password. Use a memorable phrase including special characters, mixed cases and numbers instead of a simple word.
- Add new entries by clicking “Add Entry” (the key icon).
- Enter the site name, username, password, and any notes.
- Always lock KeePass (Ctrl+L) when stepping away from your computer.
KeePass Interface
KeePass Organizing Your Passwords- Create groups (folders) to sort entries. Some are auto-created, you may use or delete these and create your own (General, Windows, Network, etc).
- Use notes in each entry to store details like security questions or PINs.
- You can search for entries using the top search bar.
Adding Your First Entry
- Click the key icon or press Ctrl+I.
- Fill in:
- Title: (e.g., "Brodart Login")
- Your Username
- Your Password (by default a complex password is auto-generated - delete to create your own)
- URL: (optional, for quick site access)
- Click OK to save.
Copy & Paste Securely
- Double-click the username or password field in KeePass. It will copy to your clipboard for 10 seconds, then automatically clear for safety.
- Paste it into your login page and you’re done or use the Auto-Type button to fill in both username and password
Bitwarden
A secure, cloud-based password manager that helps you store, manage, and access your passwords and other sensitive information safely. It’s available as a desktop app, web vault, browser extension, and mobile app.
At PLS:
- Purchased for IT staff
- Allows shared credential management collections
- Requires 2FA
- Provides event logging audit trail
- See tech-only Bitwarden article