Safeguarding Your Passwords
Friday, October 30, 2026
Story By: Donald Smith | donald.smith@okstate.edu
Passwords are a critical tool for protecting access to our personal and financial data and our online identity. We are instructed: don’t use the same password for all your accounts and keep your password secure and private. But with so many accounts, it is a struggle to be consistent with these instructions: research shows that 66% of people reuse the same password across multiple accounts. Moreover, cybercrime is financially lucrative: the cost of cybercrime is projected to reach $10.5 trillion annually worldwide. Using a password manager can help secure your passwords. If you need help generating a password, password managers can help by suggesting a strong, unique password. Both features significantly reduce your risk of becoming a victim of cybercrime.
Methods Used by Hackers Where a Password Manager May Help
Brute Force Attacks
A hacker can use automated software to repeatedly guess passwords until the correct one is found. This method of attack is called “brute force.” Their hacking tools often try common words, names, dates, and passwords that have been previously leaked. The best defense to brute force attacks is to use long, unique passwords that combine letters, numbers, and special characters. A password manager can generate and store these complex passwords for you.
Credential Stuffing
After a data breach, stolen usernames and passwords are often sold or shared online. This is known as Credential Stuffing. Hackers use automated tools to attempt access to sites using those same credentials. To minimize this threat, use a unique password for the site, including email, banking, shopping and social media. A password manager can help you remember these unique passwords.
Local Discovery
Sometimes passwords are stolen without sophisticated technology or hacking techniques. What harm can come about if your password is written on a sticky note and left on your office desktop or visible on an unlocked computer? Anyone with physical access to this area could see the note(s)! To protect yourself, avoid writing down passwords in accessible locations. Instead, always lock your computer when stepping away from your desk, use a password manager to store credentials securely.
Password Managers: A Simple Way to Strengthen Security
Strong, unique passwords and multi-factor authentication provide excellent protection. A password manager can securely store your passwords in an encrypted vault. Some managers can help you create strong, unique passwords by suggesting a password for the resource you plan to protect.
While modern browsers can save passwords, dedicated password managers typically provide additional security features such as password-strength analysis, secure sharing, encrypted storage and breach monitoring.
Recommended Password Managers
Several reputable password managers are available, including:
- Bitwarden - An affordable, open-source password manager with strong security and cross-platform support. This has a free and a paid version. The free version is restricted in capabilities.
- 1Password - Known for its ease of use, security features, and support for families and businesses. Only has a paid version.
- Keeper - A feature-rich password manager with strong business and personal security tools. This has a free and paid version. The free version also has restrictions.
No security solution is perfect, but using a password manager, creating unique passwords for every account, and enabling multi-factor authentication (MFA) can dramatically improve your online security.
Should I Write Down My Password?
Some people prefer to keep a written record of their passwords. While a notebook cannot be hacked remotely, it should be stored securely in a locked location and treated with the same care as other sensitive documents. Remember to keep it updated too!
References:
- Psychology of Passwords
- Password manager annual report
- Why not to reuse passwords
- Cybercrime financial damage projection
Story By: OSU Agriculture IT | dasnr_it@okstate.edu