Are password managers safe for a company to use?
Yes, for most companies they are far safer than the alternatives: reused passwords, spreadsheets and sticky notes. A good business password manager lets every person use long, unique passwords, shares team credentials without sending them by e-mail, and removes a leaver's access in one step. The vault becomes valuable, so protect it: require phishing-resistant multi-factor authentication for it, choose a provider that encrypts the vault so that the provider cannot read its content, check where your data is stored, block vault access from unmanaged devices if the product allows it, and keep the recovery procedure documented. Do not keep the password manager's own admin credentials only inside it. A password manager does not stop phishing on its own, though it helps, because it will not fill a password into a fake site. NetSenX does not see passwords or vaults; it watches what devices do on the network.
Read next
Related questions
- What makes a good company password policy?
- What is single sign-on, and does it improve security?
- How do we monitor an external accountant's remote access to our PCs?
- What happens if our outsourced IT provider or bookkeeper is hacked?
- How do I find old remote-access tools that suppliers left on our servers?
← All 45 questions on Zero trust, identity and segmentationAll topics