Password manager

In short: A password manager stores all credentials encrypted and fills them in. You only have to remember one strong master password.

In more detail: It generates long, random passwords for every site. A data breach at one service therefore does no harm at others. The data is encrypted with the master password; the provider cannot read it.

Our context: The password generator creates random passwords directly in the browser.

In Depth

• Master password: long (passphrase of four to six words), used only for this.
• Why not reuse: Attackers try stolen credentials on many sites (credential stuffing).
• Fills only on the right site: This protects against fake sites.
• Backup: Keep an emergency sheet with master password and recovery codes safe.
• Browser storage: convenient but less protected than a specialised manager.

See also: Two-factor authentication (2FA), Storing passwords safely (hashing with salt)