Password Manager Habits

What You'll Learn

• Migrate existing passwords from insecure storage (spreadsheets, sticky notes, browser-only storage) into an enterprise password manager
• Generate and store unique, high-entropy passwords for each account using the manager's built-in generator
• Manage shared team credentials securely within a password vault instead of passing them through chat or email
• Recognize phishing attempts using autofill behavior as a detection signal, since password managers will not fill credentials on spoofed domains
• Maintain vault hygiene by auditing stored entries, removing stale credentials, and prioritizing weak or reused passwords flagged by health checks

Training Steps

1. A Forgotten Password

   It's Alice's first day back after a long vacation at CypherPeak Technologies. As she tries to log into the company portal, she realizes she can't remember her password. She's tried several combinations, but none of them work.

2. The Common Mistake

   Alice thinks back to her password habits. Like many people, she's been using variations of the same password across multiple accounts - adding numbers or special characters to a base password she can remember. She realizes this is risky because if one account gets compromised, attackers could easily guess her other passwords.

3. Introducing the Password Manager

   Alice remembers that CypherPeak Technologies provides a password manager called KeyVault to all employees. A password manager is a secure application that stores all your passwords in an encrypted vault. You only need to remember one master password to access all your credentials.

4. Unlocking the Vault

   The password manager is locked by default - this is a security feature that protects your credentials even if someone gains access to your computer. Alice needs to enter her master password to unlock the vault. This is the one password she needs to remember.

5. Exploring the Vault

   Alice opens KeyVault and sees several saved entries from when IT set up her account. Each entry contains a website, username, and securely stored password. The passwords are hidden by default - you need to click to reveal them. This prevents shoulder surfing in shared office spaces.

6. Revealing the Password

   Alice wants to check her saved password for the Company Portal. The passwords are hidden by default to prevent shoulder surfing. To view the actual password, she needs to click the reveal button (eye icon).

7. Understanding Password Strength

   Alice sees that her password is 'OldPassword123' - a weak password that was set when her account was first created. Weak passwords like this are vulnerable to: Dictionary attacks (using common words) Brute force attacks (trying all combinations) Social engineering (guessing based on personal info)

8. Generating a Strong Password

   KeyVault includes a built-in password generator that creates random, cryptographically secure passwords. These generated passwords are impossible to guess and unique to each account. Since the password manager remembers them, you don't need to memorize them yourself.

9. Password Generated

   Excellent! The password generator created a strong, random password. Notice how it includes: Uppercase and lowercase letters Numbers Special characters At least 16 characters This password would take billions of years to crack using brute force methods.

10. Logging into the Portal

    Now Alice can use the password manager to log into the company portal. She needs to open the browser, navigate to the login page, and use her stored credentials. The password manager can autofill credentials, saving time and preventing typos.