But without the key, a hacker will only get encrypted blobs of data. So they either don’t encrypt the data, or store the keys online, where the hacker can get them. Other sites need to process your movie-watching habits, uploaded video, and orders for products so they need to be able to read the data. The thing is, unlike Netflix, YouTube, or Amazon, a password manager vendor doesn’t need, and shouldn’t want to be able to read your data, so they don’t store the password to decrypt the data. However, a good password manager will encrypt all of your data with your master password, and possibly another key. I believe this is what you are concerned about. Choose a good one and a hacker won’t be able to guess it.Ģ. A hacker can access a password manager’s site in two ways.ġ. People’s view of hacking is quite distorted, likely from watching bad depictions of hacking. I’ve heard positive things about LastPass, KeePass, Dashlane, and RoboForm.Īccessing a password manager’s data online is a bit different from another site.

I still use 1Password mostly because it was the first one I tried, but if they force me into a monthly subscription I will likely bail. All of my accounts now have their own unique, complex passwords. I would also add a reminder about free and/or cheap password managers. Help you use encrypted https whenever possible.

Use the HTTPS Everywhere Browser Extension (available on Chrome, Firefox, Firefox for Android, and Opera).

I tested their recommendation and I will definitely use it in the future for those “Give me your e-mail and get XXX” offers.

Check where else you’ve been hacked at.

Turn on automatic software updates wherever available.

Here are highlights and direct links for your convenience: In their latest issue, Consumer Reports has a 10-minute digital privacy tune-up.

Following the news of the Yahoo hack of half a billion users (noted as the biggest data breach in history), you may be interested in some more tips regarding online security.

Keeanywhere