How Password Managers and Passkey Technology Improves Your Online Security

Welcome back to my column.In my previous article I promised to provide some explanations about password managers and passkeys.First, let’s review the origins of digital passwords.

Brief History of Computer Passwords

Though the use of computer or digital passwords has been around since the early sixties, it wasn’t really until the mid-nineties that they became ubiquitous.In the sixties, user passwords were meant to protect users’ files on time-shared computers typically only found in universities.

It wasn’t until the mid-nineties when Microsoft introduced Windows 95 to the world where the notion of user profiles and passwords became more commonplace (actually, it was Windows NT but who was running Windows NT at home, right?)

Windows 95 allowed users to have their own personalized desktop, file folders, photos, and music, with everyone thinking their “side” of the computer was private.

As computer networks became more popular in the workplace in the nineties, the necessity to have different user profiles became obvious.At that time, not all employers provided dedicated computers to all employees, so users had to share the same computer at work.I can remember some shipping departments having one computer for four employees.

Having user profiles and unique passwords provided protection and traceability.Who logged in last?Who jammed printer with their son’s school project?Who shipped the widgets to the wrong address?I believe it was about this time that the notion of privacy and confidentiality became clear.Not everyone should have access to confidential HR files or financial information.

Today, it’s almost impossible to find an up-to-date computer that doesn’t enforce a strong password policy such as a minimum number of special characters, letters (both lower and upper case), and numbers.When password policy complexity became serious in that you were required to change your password every 30, 60, or 90 days, or you couldn’t reuse the same password, or you couldn’t reuse a similar password, or you couldn’t use a password with four consecutive numbers, or a password that resembled your username or email address too closely, the need to have a simple, error-proof solution suddenly presented itself.

Combine that headache with the introduction of online accounts such as AOL, MSN, Yahoo, ICQ, and Hotmail, and you’ve got yourself a serious wrinkle to iron.Thank goodness someone figured out there’s a new problem to solve:The introduction of the password manager.

Password Managers

Before I discovered password managers, I used an Excel file to store my passwords.Many people I know still store their passwords in their “contacts” on their mobile phone, or in their Notes or OneNote app.When I used Excel, I thought I was smart enough not to name the file “passwords” but rather “birthdays.”But anyone finding my “birthdays” file would soon find it was my passwords file.It wasn’t even password protected so go figure.

Password managers are like a super notebook that stores all your passwords very securely.The kicker is that you only really need to memorize one password (the one you need to access your password manager, right?) instead of dozens.

Password managers provide an additional layer of security in that they help you to not reuse the same password.Password managers such as 1Password and BitWarden completely remove the burden of memorizing all your passwords.They provide online dashboard access as well as apps you can download to your computer or mobile device to sync all your logins no matter where you are or what device you’re using.My favorite password manager is 1Password (1password.com), not only because of its ease-of-use but that it’s Canadian-based.

Most password managers provide free and paid services, provide family access, can generate new random complex passwords for you, and even provide you with a security score based on reuse of passwords, or login sites that have been previously breached.

Passkeys

While passkeys have been gaining traction in the past two years and seem to be the future of authentication, passkey technology still requires widespread adoption across the web because not all platforms accommodate passkey technology yet.Amazon, Apple, Google, and Microsoft have already implemented passkey technologies.If you shop online with Amazon, have an online OneDrive or Outlook account, or a Gmail account, you can set up passkey authentication if you haven’t already done so.

Passkeys help you if you forget your passwords.Passkeys provide what is known as a passwordless sign-in.Sounds crazy, I know.Passkeys are more secure than using passwords because you need an actual type of key that cannot be guessed to sign-in.This key can be a biometric identification (nobody can steal your retina scan or fingerprints) or another device or a USB dongle.

Conclusion

No technology can guarantee your online accounts’ invincible security or that they will never be compromised.But implementing several layers of security such as complex passwords, 2FA/MFA, a password manager, and using a passkey where available will lessen the likelihood that your accounts or devices will be breached.Stay safe!