Ask Leo: Are Password Managers Safe?

July 27, 2012 by in leo notenboom

are password managers safe

Are Password Managers Safe?

By Leo Notenboom

Recently I tried to use RoboForm for an account at a large financial institution, but I couldn’t get it to work. In response to my inquiry, this institution said they do not permit log in using credentials that are stored on software because the security of the password could become jeopardized if my computer were hacked, invaded, etc. Is this true? Am I safer not to use RoboForm?

Technically they are mostly correct.

But not-so-technically I believe – strongly – that they are seriously misguided.

Using a password manager like Roboform is significantly safer than the alternatives most people choose.

The real problem is that most people will not do what your bank really wants you to do.

And I’ll admit it – I don’t do what your bank wants you to do either.

What the Bank Wants

By preventing you from using a password manager, it’s pretty clear that your bank wants you to:

  • Have a good, strong password
  • Keep it nowhere but in your head
  • Yes, that would be ideal.

    It’s also impractical in my opinion.

    As far as I’m concerned those two requirements are mutually exclusive – particularly if you also keep to best practices and never use the same password for more than one (important) site.

    Without a Password Manager

    Faced with the restriction of not being able to use a password manager, most people will compromise their security in some other way.

  • They’ll choose a less secure password that’s easy for them to remember.
  • They’ll use the same password at multiple sites in addition their bank.
  • They’ll save the password on their computer using some other, less secure technology.
  • They’ll write the password on a sticky note kept close the computer.
  • As you can see, in my opinion preventing use of technology specifically designed to keep passwords secure doesn’t increase security. When you factor in human nature it significantly decreases overall security.

    Read the rest of the story here..

    This post is excerpted with permission from Leo Notenboom.

    Leo Notenboom

    About Leo Notenboom

    Leo A. Notenboom is the owner of Puget Sound Software, LLC and the Leo in Ask Leo!. Leo has been in the personal computer and software industry since 1979, as a software engineer, a manager of software engineers, and as a consultant. In 1983 Leo joined what was then a medium sized local company called Microsoft and spent the next 18 years in a wide variety of groups working on a wide variety of software. If you're running Microsoft Windows, if you've used a Microsoft development tool or Microsoft Money, or if you've ever purchased a ticket through Expedia, there's a good chance you've been touched by some of his work. And of course, since 2003, Leo has been answering your tech questions on Ask Leo!

    Leave a Reply

    Your email address will not be published. Required fields are marked *


    You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

    Sign up for our FREE Newsletter

    Our weekly newsletter is packed with computer tips & tricks.
    As a bonus, receive monthly emails with exclusive offers.

    Which device is the most important to you?

    View Results

    Loading ... Loading ...


    Scan with PC Matic

    Contributors