1 00:00:00,080 --> 00:00:01,110 In this lesson, 2 00:00:01,110 --> 00:00:04,290 we're going to cover the concept of a password manager. 3 00:00:04,290 --> 00:00:05,370 Now, a password manager 4 00:00:05,370 --> 00:00:08,460 is a specialized tool or plugin or extension 5 00:00:08,460 --> 00:00:10,500 that can be used with your web browser 6 00:00:10,500 --> 00:00:12,630 in order to remember all the different usernames 7 00:00:12,630 --> 00:00:13,740 and passwords you have 8 00:00:13,740 --> 00:00:16,290 for all the various sites that are out there. 9 00:00:16,290 --> 00:00:18,330 Now, one of the biggest vulnerabilities or traps 10 00:00:18,330 --> 00:00:20,310 that I see end users falling into 11 00:00:20,310 --> 00:00:22,830 is the fact that they reuse their passwords. 12 00:00:22,830 --> 00:00:24,630 And this is a really dangerous practice 13 00:00:24,630 --> 00:00:26,610 because if you're reusing a password 14 00:00:26,610 --> 00:00:28,200 across multiple websites 15 00:00:28,200 --> 00:00:30,060 and one of those websites gets hacked, 16 00:00:30,060 --> 00:00:31,800 well, your password is now known 17 00:00:31,800 --> 00:00:33,660 by everybody on the dark web 18 00:00:33,660 --> 00:00:36,570 and they can try using that across other sites as well. 19 00:00:36,570 --> 00:00:38,370 We saw this happen many years ago 20 00:00:38,370 --> 00:00:42,210 when sites like MSN or Yahoo or Target had gotten breached. 21 00:00:42,210 --> 00:00:44,010 Then the attackers took those usernames 22 00:00:44,010 --> 00:00:45,810 and passwords they got from that breach 23 00:00:45,810 --> 00:00:48,090 and then tried it across many other sites. 24 00:00:48,090 --> 00:00:49,590 And if you reuse the same username 25 00:00:49,590 --> 00:00:51,540 or password across multiple sites, 26 00:00:51,540 --> 00:00:53,820 they would have access to all of your data. 27 00:00:53,820 --> 00:00:56,130 One of the biggest challenges with this password reuse 28 00:00:56,130 --> 00:00:58,620 is that most usernames are going to be the same 29 00:00:58,620 --> 00:01:00,660 because most usernames are going to be set 30 00:01:00,660 --> 00:01:02,220 to your email address 31 00:01:02,220 --> 00:01:04,050 and most of us use the same email address 32 00:01:04,050 --> 00:01:05,550 across multiple sites. 33 00:01:05,550 --> 00:01:07,170 So it is really important 34 00:01:07,170 --> 00:01:09,210 that we use a different long, strong, 35 00:01:09,210 --> 00:01:10,560 and complicated password 36 00:01:10,560 --> 00:01:13,500 for every single website that we are going to use. 37 00:01:13,500 --> 00:01:15,330 Now, unfortunately, as humans, 38 00:01:15,330 --> 00:01:18,060 it's really hard for us to remember a lot of long, strong, 39 00:01:18,060 --> 00:01:19,530 complicated passwords. 40 00:01:19,530 --> 00:01:22,710 So there is this function called a password manager 41 00:01:22,710 --> 00:01:24,330 who can do this for you. 42 00:01:24,330 --> 00:01:25,770 And this is what we're going to talk about 43 00:01:25,770 --> 00:01:27,570 in this particular lesson. 44 00:01:27,570 --> 00:01:28,920 Now many of our web browsers 45 00:01:28,920 --> 00:01:32,160 have a password functionality built into it directly. 46 00:01:32,160 --> 00:01:34,800 For example, if you go into Google Chrome, 47 00:01:34,800 --> 00:01:36,690 you'll find that when you go into the settings 48 00:01:36,690 --> 00:01:38,070 underneath the three dots, 49 00:01:38,070 --> 00:01:41,010 that you'll be able to go into your Autofill area. 50 00:01:41,010 --> 00:01:43,950 And from here there is a built-in password manager. 51 00:01:43,950 --> 00:01:45,090 Now you're going to notice here 52 00:01:45,090 --> 00:01:48,240 that I actually am not using this password manager, 53 00:01:48,240 --> 00:01:49,170 and most of the time, 54 00:01:49,170 --> 00:01:51,180 I actually prefer to turn off the feature 55 00:01:51,180 --> 00:01:52,950 to offer to save my passwords 56 00:01:52,950 --> 00:01:56,520 or to use Auto Sign-in with this password manager. 57 00:01:56,520 --> 00:01:59,790 The reason is, personally, I find that password managers 58 00:01:59,790 --> 00:02:01,500 that are built into another tool 59 00:02:01,500 --> 00:02:03,990 such as a web browser are not nearly as secure 60 00:02:03,990 --> 00:02:06,930 as those that are standalone third-party tools. 61 00:02:06,930 --> 00:02:09,539 So instead of using the built-in password manager 62 00:02:09,539 --> 00:02:13,320 inside of Microsoft Edge, Google Chrome, Apple Safari, 63 00:02:13,320 --> 00:02:14,790 or Mozilla Firefox, 64 00:02:14,790 --> 00:02:17,850 I tend to prefer to use a third-party password manager 65 00:02:17,850 --> 00:02:22,320 like OnePass, Dashlane, LastPass, or Bitwarden. 66 00:02:22,320 --> 00:02:24,540 In my case, I actually prefer Bitwarden 67 00:02:24,540 --> 00:02:26,490 and that's what I'm going to show you how to install 68 00:02:26,490 --> 00:02:29,010 as a third-party extension into Google Chrome 69 00:02:29,010 --> 00:02:31,380 and how you can use that type of a password manager 70 00:02:31,380 --> 00:02:33,750 as you move forward with your daily work. 71 00:02:33,750 --> 00:02:35,370 Now in order to install Bitwarden, 72 00:02:35,370 --> 00:02:37,350 which is the password manager I want to use, 73 00:02:37,350 --> 00:02:40,050 I need to first go into the extension store 74 00:02:40,050 --> 00:02:42,540 and by going into the extension store or marketplace, 75 00:02:42,540 --> 00:02:45,150 I can download the extensions that I want. 76 00:02:45,150 --> 00:02:47,100 So I'm going to go up here into my three dots. 77 00:02:47,100 --> 00:02:49,320 I'm going to go over here to my More tools 78 00:02:49,320 --> 00:02:51,420 and then I'm going to go to Extensions. 79 00:02:51,420 --> 00:02:54,360 From here, I'm going to be able to search my extensions, 80 00:02:54,360 --> 00:02:56,640 which only search what's locally on my computer, 81 00:02:56,640 --> 00:02:59,040 or I can click the three lines on the left hand side 82 00:02:59,040 --> 00:03:02,490 and go down to the bottom to open the Chrome web store. 83 00:03:02,490 --> 00:03:04,500 From here, I now have a trusted area 84 00:03:04,500 --> 00:03:06,690 to download different tools, plugins, 85 00:03:06,690 --> 00:03:08,790 and extensions that I may want to use. 86 00:03:08,790 --> 00:03:11,160 In our case, I'm looking for a password manager, 87 00:03:11,160 --> 00:03:12,420 so I'm going to type that in 88 00:03:12,420 --> 00:03:13,253 and you're going to see 89 00:03:13,253 --> 00:03:16,050 there are lots and lots of password managers out there, 90 00:03:16,050 --> 00:03:17,340 but the first three that come up 91 00:03:17,340 --> 00:03:19,350 are the ones that are featured by Google, 92 00:03:19,350 --> 00:03:22,260 which include the Avira Password Manager, LastPass, 93 00:03:22,260 --> 00:03:24,240 and Norton Password Manager. 94 00:03:24,240 --> 00:03:26,790 In addition to this, if you click on the More button, 95 00:03:26,790 --> 00:03:28,470 you'll see all of the other extensions 96 00:03:28,470 --> 00:03:30,570 that fit the term password manager 97 00:03:30,570 --> 00:03:32,280 sorted by either ranking 98 00:03:32,280 --> 00:03:35,370 or being featured because they paid an extra fee to Google. 99 00:03:35,370 --> 00:03:38,490 In my case, I only want to consider any password manager 100 00:03:38,490 --> 00:03:40,230 that is going to be four star or above. 101 00:03:40,230 --> 00:03:42,840 And so I can do that by clicking on the ratings over here. 102 00:03:42,840 --> 00:03:44,880 And if I wanted to be even a little bit more stringent, 103 00:03:44,880 --> 00:03:48,420 I could say I only want to look at five-star rated programs. 104 00:03:48,420 --> 00:03:49,860 Here you can see that the first one 105 00:03:49,860 --> 00:03:51,450 that pops up is Bitwarden, 106 00:03:51,450 --> 00:03:53,430 which is the one that I personally use 107 00:03:53,430 --> 00:03:55,410 and I really like it and trust it. 108 00:03:55,410 --> 00:03:56,760 To be able to use Bitwarden here, 109 00:03:56,760 --> 00:03:58,020 we'll simply click on it 110 00:03:58,020 --> 00:03:59,070 and this will allow us to go 111 00:03:59,070 --> 00:04:02,250 and add this into our Chrome as an extension. 112 00:04:02,250 --> 00:04:03,960 Go ahead and click Add extension 113 00:04:03,960 --> 00:04:06,090 and this now gives this password manager 114 00:04:06,090 --> 00:04:07,860 the ability to read and write passwords 115 00:04:07,860 --> 00:04:09,960 as you're entering them into different sites 116 00:04:09,960 --> 00:04:11,280 and to be able to use those 117 00:04:11,280 --> 00:04:14,100 and hold those as an encrypted and protected vault 118 00:04:14,100 --> 00:04:16,620 that contains all of your sensitive information. 119 00:04:16,620 --> 00:04:19,709 Once you have that done, you can go ahead and close this tab 120 00:04:19,709 --> 00:04:21,660 and then we're going to go ahead and close this tab 121 00:04:21,660 --> 00:04:23,040 and this tab as well, 122 00:04:23,040 --> 00:04:25,170 bringing us back to our settings area. 123 00:04:25,170 --> 00:04:27,750 From here, I'm going to click on the little puzzle piece icon, 124 00:04:27,750 --> 00:04:29,130 which is for the extensions, 125 00:04:29,130 --> 00:04:31,800 and you'll see the Bitwarden has now been installed. 126 00:04:31,800 --> 00:04:33,630 If you click the little pin next to it, 127 00:04:33,630 --> 00:04:35,670 this will pin it to your taskbar at the top 128 00:04:35,670 --> 00:04:38,340 and you'll see it's now located right here. 129 00:04:38,340 --> 00:04:40,380 From there, you can click on Bitwarden 130 00:04:40,380 --> 00:04:42,090 and then you'll be able to log in, 131 00:04:42,090 --> 00:04:45,150 sign in with an enterprise account or create a new account. 132 00:04:45,150 --> 00:04:47,430 Bitwarden is a completely free password manager 133 00:04:47,430 --> 00:04:49,560 that you can use on a personal level, 134 00:04:49,560 --> 00:04:51,870 but if you're like me and you have a corporate account, 135 00:04:51,870 --> 00:04:52,703 you can log in 136 00:04:52,703 --> 00:04:54,660 using those corporate account credentials as well. 137 00:04:54,660 --> 00:04:56,370 And there is a fee as a company 138 00:04:56,370 --> 00:04:58,260 to be able to have a Bitwarden account 139 00:04:58,260 --> 00:04:59,970 across your entire organization 140 00:04:59,970 --> 00:05:02,550 and allows you to share passwords with other people as well. 141 00:05:02,550 --> 00:05:04,020 And this makes it really useful, 142 00:05:04,020 --> 00:05:06,120 especially if you want to share passwords 143 00:05:06,120 --> 00:05:07,710 in a more secure way. 144 00:05:07,710 --> 00:05:10,050 In our case, we're going to go ahead and create a new account, 145 00:05:10,050 --> 00:05:11,940 and I'm just going to put in my email address. 146 00:05:11,940 --> 00:05:13,500 In this case I'm going to use Titan Cipher, 147 00:05:13,500 --> 00:05:15,570 which is an account I use for demonstrations 148 00:05:15,570 --> 00:05:18,543 and I'm going to give it a nice, long, strong password. 149 00:05:21,180 --> 00:05:22,440 Once you've done that, 150 00:05:22,440 --> 00:05:24,440 you can then retype your master password 151 00:05:26,430 --> 00:05:28,410 and this password is what's going to be used 152 00:05:28,410 --> 00:05:30,630 to be able to create that encryption 153 00:05:30,630 --> 00:05:32,700 and it's going to encrypt all of your documents 154 00:05:32,700 --> 00:05:36,000 and all of your passwords using this same password. 155 00:05:36,000 --> 00:05:38,250 This means if you ever forget this password, 156 00:05:38,250 --> 00:05:39,570 you will now have no access 157 00:05:39,570 --> 00:05:41,580 to any of the other passwords you have 158 00:05:41,580 --> 00:05:43,260 because this is the encryption key. 159 00:05:43,260 --> 00:05:44,790 So it's important to choose something 160 00:05:44,790 --> 00:05:46,020 that is long and strong, 161 00:05:46,020 --> 00:05:48,150 but also something you can remember. 162 00:05:48,150 --> 00:05:49,890 The great thing about using a password manager 163 00:05:49,890 --> 00:05:50,723 like this though 164 00:05:50,723 --> 00:05:53,430 is you only have to remember one long, strong password 165 00:05:53,430 --> 00:05:56,250 because everything else will be stored by this tool 166 00:05:56,250 --> 00:05:59,100 and be able to be used anytime we log into a site. 167 00:05:59,100 --> 00:06:00,000 Now that I've done that, 168 00:06:00,000 --> 00:06:01,230 I'm going to click that I am human 169 00:06:01,230 --> 00:06:02,970 by clicking the CAPTCHA 170 00:06:02,970 --> 00:06:04,410 and then I will submit this 171 00:06:04,410 --> 00:06:06,870 and this will create my new account. 172 00:06:06,870 --> 00:06:09,450 Now that my new account has been created, I can log in, 173 00:06:09,450 --> 00:06:13,110 so I'm going to use titancipher@gmail.com 174 00:06:13,110 --> 00:06:16,170 and then my nice, long, strong password that I just created. 175 00:06:16,170 --> 00:06:17,970 This will then decrypt this vault 176 00:06:17,970 --> 00:06:20,880 and allow me to access anything inside of it. 177 00:06:20,880 --> 00:06:24,840 Once you've done that, click I am a human, and then log in. 178 00:06:24,840 --> 00:06:26,760 From here, you now have your vault, 179 00:06:26,760 --> 00:06:29,550 and inside your vault you can add different items. 180 00:06:29,550 --> 00:06:32,040 For example, let's say I wanted to go in here 181 00:06:32,040 --> 00:06:35,580 and added a new account, for example, Gmail. 182 00:06:35,580 --> 00:06:39,270 The username for that was titancipher@gmail.com. 183 00:06:39,270 --> 00:06:41,490 And then we can select our password. 184 00:06:41,490 --> 00:06:42,960 If we have a current password 185 00:06:42,960 --> 00:06:45,960 that may not be very secure like password, 186 00:06:45,960 --> 00:06:48,270 we can put that in and it will save it for us, 187 00:06:48,270 --> 00:06:50,220 or we can choose to have it generate 188 00:06:50,220 --> 00:06:52,830 a random long, strong password for us. 189 00:06:52,830 --> 00:06:53,970 If I click that button, 190 00:06:53,970 --> 00:06:56,070 you'll see it will overwrite the current password 191 00:06:56,070 --> 00:06:58,710 with a nice, long, strong password. 192 00:06:58,710 --> 00:07:01,140 From here we can choose to either use a password 193 00:07:01,140 --> 00:07:03,540 or a username, a password or a passphrase, 194 00:07:03,540 --> 00:07:05,430 and how long we want it to be. 195 00:07:05,430 --> 00:07:07,320 In my case, I want it to be a password 196 00:07:07,320 --> 00:07:10,020 that's at least 14 characters long, has uppercase, 197 00:07:10,020 --> 00:07:13,380 lowercase, numbers, and special characters. 198 00:07:13,380 --> 00:07:15,840 And at this point I have everything the way I want. 199 00:07:15,840 --> 00:07:18,090 I can go ahead and hit Select 200 00:07:18,090 --> 00:07:19,050 and this will then create 201 00:07:19,050 --> 00:07:21,810 that nice, long, strong random password. 202 00:07:21,810 --> 00:07:23,880 Now don't worry about memorizing this password 203 00:07:23,880 --> 00:07:25,440 'cause it doesn't really matter. 204 00:07:25,440 --> 00:07:28,260 Once we save this and we try to log into Google, 205 00:07:28,260 --> 00:07:30,180 it's going to be able to use this password for us 206 00:07:30,180 --> 00:07:32,400 to be able to log in to that account. 207 00:07:32,400 --> 00:07:33,990 So I'm going to go ahead and hit Save here. 208 00:07:33,990 --> 00:07:35,010 And now that I've done that, 209 00:07:35,010 --> 00:07:36,870 you can see that Google is here. 210 00:07:36,870 --> 00:07:38,850 If I wanted to be able to get my username from that, 211 00:07:38,850 --> 00:07:41,160 I can click on the head and this will copy that 212 00:07:41,160 --> 00:07:43,320 and then I can paste that anywhere I needed to, 213 00:07:43,320 --> 00:07:44,910 for example, right there. 214 00:07:44,910 --> 00:07:46,890 Or if I wanted to be able to go ahead 215 00:07:46,890 --> 00:07:50,010 and grab that password, I can again click right into here, 216 00:07:50,010 --> 00:07:52,830 type in Gmail, and then click on the password key. 217 00:07:52,830 --> 00:07:53,663 Once I do that, 218 00:07:53,663 --> 00:07:56,430 it's copied that long, strong password again for me. 219 00:07:56,430 --> 00:07:58,830 And from here I'm able to paste it in 220 00:07:58,830 --> 00:08:01,200 and you can see that long, strong password. 221 00:08:01,200 --> 00:08:03,930 In addition to that, when you go to a website like Gmail 222 00:08:03,930 --> 00:08:05,310 and you try to log in, 223 00:08:05,310 --> 00:08:07,560 it's going to allow you to be able to log in 224 00:08:07,560 --> 00:08:09,810 using that BitLocker login. 225 00:08:09,810 --> 00:08:11,070 So I'll click here 226 00:08:11,070 --> 00:08:13,980 and it'll be able to find that I have Gmail 227 00:08:13,980 --> 00:08:15,990 and from here I'll click on that 228 00:08:15,990 --> 00:08:18,363 and it will allow me to copy in that username. 229 00:08:20,250 --> 00:08:22,410 In addition to that, we can then put in our password 230 00:08:22,410 --> 00:08:25,530 by doing the exact same thing, going into here, 231 00:08:25,530 --> 00:08:27,540 selecting our Google account 232 00:08:27,540 --> 00:08:30,030 and then copying and pasting in that password 233 00:08:30,030 --> 00:08:32,340 and then clicking Next in order to log in. 234 00:08:32,340 --> 00:08:34,740 And from here we're now logged into this account 235 00:08:34,740 --> 00:08:37,650 and we'll have no issues moving forward in using Bitwarden. 236 00:08:37,650 --> 00:08:39,750 Now also, whenever you're using Bitwarden, 237 00:08:39,750 --> 00:08:42,419 anytime you try to log into a new site for the first time, 238 00:08:42,419 --> 00:08:44,130 it'll ask you if you want to remember 239 00:08:44,130 --> 00:08:45,870 its username and password. 240 00:08:45,870 --> 00:08:47,550 For example, let's say I wanted to go 241 00:08:47,550 --> 00:08:51,030 and create a new account at something like carnival.com, 242 00:08:51,030 --> 00:08:53,640 which is a cruise provider here in the United States. 243 00:08:53,640 --> 00:08:56,700 If I wanted to do that, I can can go here to carnival.com 244 00:08:56,700 --> 00:08:58,560 and then once I get to the website, 245 00:08:58,560 --> 00:09:00,810 I can then click on Create an account. 246 00:09:00,810 --> 00:09:02,040 And from here I'm going to go ahead 247 00:09:02,040 --> 00:09:04,800 and enter in the username and password that I want to use. 248 00:09:04,800 --> 00:09:07,890 In this case, titancipher@gmail.com. 249 00:09:07,890 --> 00:09:10,680 And then when I go to password, again, I'm going to go in here 250 00:09:10,680 --> 00:09:14,400 and I'm going to choose a random password using my generator. 251 00:09:14,400 --> 00:09:16,380 Once I have that, I'll paste it in. 252 00:09:16,380 --> 00:09:17,280 If I hit Show password, 253 00:09:17,280 --> 00:09:18,990 you'll see it's that same password I just had 254 00:09:18,990 --> 00:09:20,640 and then click Sign up. 255 00:09:20,640 --> 00:09:21,930 Once you get to the website 256 00:09:21,930 --> 00:09:24,180 and you click on Login or Create an account, 257 00:09:24,180 --> 00:09:25,560 in my case I already have an account, 258 00:09:25,560 --> 00:09:27,090 so I'm going to click on Login, 259 00:09:27,090 --> 00:09:29,370 and when I go here it's going to be able to go 260 00:09:29,370 --> 00:09:32,430 and find that inside of Bitwarden any passwords 261 00:09:32,430 --> 00:09:33,600 that I've already saved there. 262 00:09:33,600 --> 00:09:35,430 So if you click here on Bitwarden, 263 00:09:35,430 --> 00:09:37,530 you'll see that I already have carnival.com 264 00:09:37,530 --> 00:09:40,020 and titancipher@gmail.com. 265 00:09:40,020 --> 00:09:41,760 If I simply click on my name here, 266 00:09:41,760 --> 00:09:44,160 it'll automatically fill it in both locations 267 00:09:44,160 --> 00:09:45,360 and allow me to click Login 268 00:09:45,360 --> 00:09:46,980 to be able to access this website 269 00:09:46,980 --> 00:09:48,240 just like I could if I enter 270 00:09:48,240 --> 00:09:50,190 the username and password myself. 271 00:09:50,190 --> 00:09:53,070 The really big benefit of using something like Bitwarden 272 00:09:53,070 --> 00:09:55,530 is that you can have all of your details in one place 273 00:09:55,530 --> 00:09:57,990 and one secure method that is fully encrypted 274 00:09:57,990 --> 00:10:00,630 and protected using the long, strong password 275 00:10:00,630 --> 00:10:03,600 that we created as our original master password. 276 00:10:03,600 --> 00:10:05,460 This protects all the other passwords 277 00:10:05,460 --> 00:10:07,530 and if I log into my actual Bitwarden account 278 00:10:07,530 --> 00:10:08,370 I use at work, 279 00:10:08,370 --> 00:10:11,490 I have hundreds and thousands of different passwords 280 00:10:11,490 --> 00:10:14,040 and I can control them all from within Bitwarden 281 00:10:14,040 --> 00:10:16,470 and I only have to memorize one key password 282 00:10:16,470 --> 00:10:18,420 that serves as my encryption phrase. 283 00:10:18,420 --> 00:10:19,620 So keep this in mind 284 00:10:19,620 --> 00:10:21,540 when you're using your password managers. 285 00:10:21,540 --> 00:10:23,820 Password managers are an awesome tool 286 00:10:23,820 --> 00:10:25,290 to give you additional security 287 00:10:25,290 --> 00:10:27,300 and prevent you from having password reuse 288 00:10:27,300 --> 00:10:28,653 across your organization.