Password manager

A password management, including password management program, identification or password manager or password management ( engl. Password Manager, Password Safe ) called, is a computer program that allows a computer user to save encrypted passwords and PIN numbers, manage and generate secure passwords can usually. Available programs exist for many platforms, such as Windows, Linux, MacOS X, Pocket PC, Smart Device, Palm OS, U3. Manage all major web browsers and store passwords. When you visit such sites they wear then the username and password automatically. Some Web browsers allow the additional protection with a master password and store the encrypted passwords from.

Need

These programs are developed from the problem that users need in their system and on many websites username with strong passwords. Since it is a high security risk to use for various services like user names and passwords (the attacker would then have access to all services ), the user should select at least a different password for each service. Because the number of hard -to-remember passwords, as they are quite long and confusing (see " choosing secure passwords " ), sometimes too big and not allocatable, is used to a password management.

Particularly system administrators need many different and very strong passwords, as they still are the weakest link in the chain of protecting a network.

Functions

In the password keeper, the user user name, store and organize related passwords and other information. Here, the database is secured by a correspondingly strong master password and encrypted.

The user enters a user name and password in the database and copied if necessary, the access to the appropriate login fields. Automation of the entire input operation is possible.

Master password

This master password, the user can save it as a key file on a USB stick or similar and must be kept in accordance with prudent, but it provides the access authorization to the password database dar. With an additional password, you can combine these techniques and increase safety.

Encoding

In general, the programs encrypt not only the passwords, but also the whole database. Here come strong encryption algorithms to use.

Password generator

Integrated is usually also a password generator that can be generated with the different strong passwords. Based on the random input of the user with the mouse or keyboard these passwords created with any length and different character sets. Light can create passwords with 100 and more bit. These strong passwords with 15 or more characters are then, however, practically usable only with a password management. Example: D ` k OGW (^ #" mPoO

The preparation is carried supported by the input from the user in order to ensure the randomness. Here, data from the mouse movement and keyboard input are taken into account, there is also voice-guided procedures.

Fuse

Securing a password database is easier than securing a mix of special password files of the browser, program files and notes or unfavorable if unprotected files on the computer containing passwords.

A password management collects passwords centrally, so only one file is to secure for all passwords. You can export the database mostly as a CSV file, which support all popular password management programs and text editors. Also, flexible XML export or easy printing is possible. Disadvantage of these formats is that they store the passwords unencrypted. So remains only to secure storage in the program's own encrypted format. The above formats are used for data exchange and data processing.

The normal password management of Internet browser Mozilla Firefox, Google Chrome and Internet Explorer stores the passwords unencrypted. Mozilla Firefox encrypts the passwords optionally with a so-called master password. Without entering this master password, the user can not use the stored passwords.

The master password in file format must be additionally secured to avoid any potential loss of the carrier medium.

Some password administrations offer the option for automatic backup.

Disadvantages

Users of password managers are dependent on the used database. Since individual passwords are no longer noticed, the user needs permanent access as possible. Locally stored databases are affected as well as offered via the Internet services due to damage of hardware and software.

Unencrypted saved passwords can be easily stolen by data thieves and represent a vulnerability dar. In modern web browsers, the protection is so far inadequate. With the help of a master password for the browser or additional software password management, you can protect the passwords sufficient.

Alternatives

With formulas created through user passwords remain independent of external suppliers. At the same time, this principle allows any high security. The user remembers that is applicable to all passwords formula that gives each different passwords in the context of a variable factor. Examples of such variable factors are, for example, a web address or a company name. From such a string you take certain characters, and combines them with given on a fixed schedule numbers and special characters. The user remembers only the necessary to create the password encryption key and thus receives individual and simultaneously secure passwords.