 TITLE: Using a Password Manager to Prevent Identity Theft CONTENT: Do You Need a Password Manager?\n-------------------------------\n###### Written by: Kristy Welsh\n_Last Updated: April 19, 2017_\nWe already have so many accounts we’re signed up for — do we really need to throw a password manager into the mix? Well, as you might have already guessed, the more accounts you have, the _more_ you need a password manager. This is just one tool to help prevent identity theft and one of many ways you can protect yourself online. \n**Why You Need a Password Manager**\n-----------------------------------\n**1)** **You need a strong, unique password for every single account.**\nEven if you take the time to create a strong, unique password yourself, it may not be as strong as one randomly generated by a password manager.\nWhat’s worse is taking the time to create a strong password only to use it on every single one of your accounts. You can be sure that if a hacker manages to get a hold of that username\/password combo from _one_ of your accounts, they are going to try it on your other accounts, too.\nBottom line, you need a different password for every login, and all of them need to be strong. Granted, you could keep your own list of unique, hard-to-remember passwords, but that’s a lot of time spent referencing the list multiple times a day.\n**2)** **You only have to remember one master password.**\nWith a password manager, the only password you need to remember is the master you set up to login to your password manager account. Of course, your password manager still has to learn whatever credentials you already have set up. So, when you’re first getting started, you will still need to login to each account so that the password manager can store the information.\n**3)** **A password manager can generate new passwords for you.**\nIf the password manager sees weak or duplicate passwords, it can alert you that changes need to be made. The password manager can generate these changes for you, ensuring you have a strong, unique password for every single account.\n**Choosing a Password Manager**\n-------------------------------\nNot all password managers are created equal. Fortunately, _PC Magazine_ reviewed the best password managers of 2016.\n**_Free password managers_**\nLastPass looks to be the best way to go, with a perfect five-star rating. LogMeOnce Password Management Suite comes in a close second. The only thing on _PC Magazine_’s list that LastPass and LogMeOnce don’t do is store application passwords.\n**_Paid password managers_**\nLastPass ranks highest on this list, too, with another five-star rating. In this case, what you’re paying for is to store the application passwords that the free version does not do. Dashlane gets five stars, too, but does not cover application passwords or have a portable edition.\n**The Security of Password Managers**\n-------------------------------------\nAs secure as password managers may be, they are not immune to hacks. We learned that when the top-rated LastPass was hacked in 2015. While stored passwords for other sites were not breached, master passwords were stolen, as well as emails and other data.\nIn response to the breach, LastPass encouraged customers to use its multifactor authentication feature.\nAs stated on the LastPass website:\n\"Multifactor authentication refers to a device that can be enabled for use with your LastPass account, and requires a second step before you can gain access to your account. Multifactor authentication devices help protect your account from keyloggers and other threats – even if your Master Password were captured, someone would be unable to gain access to your account without this second form of authentication.\"\nFor instance, if you have multifactor authentication set up on your cell phone, then every time you login to your LastPass account, your phone receives a notification. You have to click the button on your phone or you can’t login to LastPass at all. Should you lose your phone, then you can disable the multifactor authentication, which requires verification through email.\nDashlane and LogMeOnce also offer multifactor authentication, as do most other passwords managers. END