Choosing and using a password manager at work

Skills you'll practise

• Explain why a password manager makes unique, long passwords practical, citing CISA and NIST guidance
• Create a strong master password and turn on (or keep) MFA for the vault
• Recognize a missing autofill suggestion as a warning sign of a look-alike page and respond safely
• Share a work login through the organization's shared vault instead of email or chat
• Prioritize fixes from a password health report and update the saved item afterwards
• Describe what to do after a forgotten master password, a lost device or when leaving the organization

Course outline

1. 1.Using a password manager at workVideo · 2 min
2. 2.Why use a password managerLesson · 13 min
3. 3.Everyday use: saving, filling, generating and spotting fakesLesson · 14 min
4. 4.Sharing, recovery, lost devices and leavingLesson · 13 min
5. 5.Choosing and using a password manager at work: knowledge checkKnowledge check · 17 questions
6. 6.Final exam10 questions · passing it completes the course, so people who already know the material can test out

Sources it draws on

The lessons and questions are written from these references, so learners can go back to the original.

• CISA Secure Our World: Use Strong Passwords (long, random, unique; use a password manager)
• NIST SP 800-63B-4: Digital Identity Guidelines, Authentication and Authenticator Management (verifiers SHALL allow password managers and autofill; no periodic changes without evidence of compromise)