Password Manager

A password manager stores your login credentials in an encrypted vault so you can use long, unique passwords for every account without memorizing them. Options range from passwords saved in your web browser to dedicated managers such as Bitwarden, 1Password and KeePass.

Convenience comes with risk. Credentials saved in browsers and applications can be pulled from a compromised computer by infostealer malware or by post-exploitation tools like LaZagne, which penetration testers use to show how exposed stored passwords really are. Understanding how these attacks work is the first step to defending against them.

On Cracking Station you’ll learn how passwords are stored, how attackers and pentesters recover them, and how to protect yourself: use a dedicated password manager with a strong master password, turn on multi-factor authentication, lock your vault automatically and keep your devices free of malware.