Utilizing a Password Manager

Utilizing a Password Manager

What is a Password Manager?

Remembering multiple passwords that meet all CNU password standards and recommended guidelines can be difficult, particularly for people who with potential difficulties with memory. However, to preserve the security of your accounts, passwords should NEVER be written down, stored in an unencrypted/unsecured data file, or stored in a web browser. If you need to store passwords for easier management of your secure accounts, password management platforms can serve as a secure storage location. In addition, other secure information (ex. credit card details) that may be needed across other accounts may also be stored in password managers.

 

Password managers typically operate by providing users with an encrypted space that can be accessed with a Master Password, which would then become the only password a user would need to commit to memory.

1Password Login

This space would then serve as a ‘vault’ where secure information can be stored. In the case of the shown platform (1Password), clicking New Item would allow users to add new items to the vault. This vault can then be returned to at any time to retrieve the information and use it elsewhere--for example, by copying stored passwords and using them to log into the listed accounts.

1Password Vault
1Password New Item

Users with access to a password management platform may also, depending on the platform, find that passwords will auto-fill from their password manager when attempting to log in to platforms with passwords that have been stored in their vault.

PasswordAutofill

Using password management platforms encourage users to engage in proper security measures with their other passwords, without the risk of losing track of them. It is important to note that the security of password managers, and thus any information stored in them, is dependent on making and remembering a strong Master Password. Please utilize our guidance on making a strong password when selecting a Master Password, regardless of which password manager you use.

Multiple password managers are available on the current market; this documentation provides a brief overview of three of the most popular options. When selecting the password manager of your choosing, it is important to consider overall pricing, the key features offered by each platform, and the emergency access measures provided should you forget your Master Password and still need access to your account.

Platform

Availability

Pricing

Key Features

Emergency Access Mode

Platform

Availability

Pricing

Key Features

Emergency Access Mode

1 Password

CNU provides install in Self Service; login available via web browser; mobile apps available

Here

Built-in password generator, password sharing, password storage and autofill cross-platform sync, SSO integration, security policy management, Vault archiving system, functional browser integration

Provided via account Emergency Kit

LastPass

Login available via web browser; mobile apps available

Here, free version available

Password storage and autofill, MFA integration, cross-platform sync for paid version, encrypted password sharing, functional browser integrations

Set emergency contacts

Proton Pass

Login available via web browser; mobile apps available

Here, free version available

Built-in password generator, email aliases, passkey support, cross-platform support, alerts for weak/repeated passwords, vault archiving system, functional browser extension

Available for paid accounts


1Password Accounts

IT recommends that individuals check with their department at CNU to verify whether they have provided a team login associated with their SSO.  If this has occurred, the designated administrator of the team account can provide additional guidance. If not, you will need to create an individual subscription; pricing for 1Pass subscriptions can be found here. Users can also sign up for a 14-day free trial to test the platform for their needs. 

LastPass Accounts

While LastPass provides pricing options for both business and premium personal accounts, they also provide a free option for users looking for simple password management across a single device. All pricing options and an overview of their features can be found here. As with 1Password, it is recommended that individuals check with their department leads to determine their options for accessing premium account features. 

ProtonPass Accounts

While ProtonPass provides pricing options for both business and premium personal accounts, they also provide a free option for users looking for simple password management. All pricing options and an overview of their features can be found here. As with 1Password and LastPass, it is recommended that individuals check with their department leads to determine their options for accessing premium account features.