According to cyber.gov.au, this helps reduce the risk of reusing passwords across different sites, which is a common security issue.
You can think of it as a locked safe - your passwords are stored inside, and your master password is the key.
Creating a strong master passphrase
Your master password protects everything in your password manager, so it needs to be strong and unique.
Cyber.gov.au recommends using a passphrase instead of a traditional password. A passphrase is made up of random words, making it easier to remember and harder for attackers to guess.
A strong passphrase should:
- Be at least 14 characters long
- Use a random mix of four or more words
- Avoid common phrases like song lyrics or quotes
For example, crystal onion clay pretzel is far more secure than a short or predictable password.
Adding an extra layer with multi-factor authentication
Multi-factor authentication (MFA) adds another level of security to your password manager.
It requires you to confirm your identity in two or more ways before gaining access. This usually includes:
- Something you know - like your passphrase or a PIN
- Something you have - such as an authenticator app or device
- Something you are - like a fingerprint or face scan
This added step means that even if someone gets hold of your master passphrase, they are unlikely to access your accounts.
Choosing a password manager
When selecting a password manager, cyber.gov.au recommends choosing one with strong security and privacy protections.
Look for one that:
- Has a good reputation and strong security features
- Is regularly updated to address new security risks
- Keeps your passwords private so that only you can access them
- Works across the devices you use, such as phones and computers
Some password managers are free, while others are included with certain devices or software.
A simple way to stay safer online
Using a password manager is a straightforward way to improve your online security. It reduces the need to remember multiple passwords and helps keep your accounts protected without adding extra hassle.
Source: cyber.gov.au
