Secure Your Devices

Cloud-based and local password managers both have their advantages and disadvantages. While local storage is considered more secure because the data stays on your device, it can complicate syncing between multiple devices.

On the other hand, with cloud-based password managers, data is encrypted and stored on highly secure servers. This makes it convenient to use passwords on different devices because the data can be synced automatically online.

Password managers that work properly and are authenticated do not see your passwords.

Your passwords are encrypted before they are stored on their servers, which means it is impossible for them to look at your passwords. Some password managers also offer the ability to store data locally on your device, which is useful for those who are not yet fully convinced of the security of a password manager.

Google's password manager is a convenient tool that's directly integrated into Chrome and other Google services. Passwords are encrypted on Google's servers, but the company uses its own encryption system. That means it can theoretically access your stored passwords - for example, by legal order.

In addition, if there is a successful cyberattack on your Google account (for example, through phishing or a weak password), the attacker can also gain access to your Password Manager. This is because it is closely linked to your Google account and protected by the same login credentials (which is why it is very important to have an account protected by multi-factor authentication).

In contrast, tools like Bitwarden work on the principle of end-to-end encryption. Your passwords are encrypted before they leave your device, and only your master password is the key to decrypting them. Bitwarden doesn't know or store this key - so even the service provider can't access your data.

This has one big advantage: your privacy is better protected. But there's also a downside - if you forget your master password, no one will restore access to your account.

The secret of strong passwords lies in the combination of memorable words. Such passwords are known as phrasal passwords (e.g. BUM!tear4violetswithTNT) and would take several million years to crack.

A secure password should therefore contain: at least 12 characters, numbers, capital letters and special symbols (e.g. characters, punctuation marks). It can be based on part of a poem, a scene you see on your way to work, or perhaps a childhood memory.

It is not advisable to use passwords that contain easily available information such as your child's name or date of birth. It is also not advisable to place numbers or special symbols in passwords in predictable positions, such as a number at the end of a line or replacing the letter O with 0. You can learn more about passwords in the Cybercompass course. 

To use Bitwarden as the default autofill password manager on your iPhone or iPad, follow these steps.

Here you will find instructions on how to import passwords from the browser you are using into the Bitwarden password manager.

To import passwords from your MacBook into Bitwarden, follow these steps.

Instructions for Bitwarden:

Open the Bitwarden extension.
Click on Settings.
Then click on Autofill.
Check the Set Bitwarden as default password manager option.

The activation of multi-factor authentication is slightly different. You can activate it directly in the IS MU. In doubts, follow this guide.

Connecting via a VPN is generally more secure, especially on public Wi-Fi networks (e.g. cafes, airports, hotels). A VPN encrypts your internet connection, which means:

• Whoever manages the Wi-Fi network doesn't see your activity or your actual IP address, only the IP address of the VPN server you're connecting through.
• Your data is protected in transit (e.g. login details, pages visited).

However:

• Your VPN service sees what you do online because your data passes through its servers. This includes, for example, the domain of the site you are connecting to and connection times.
  If you're on a website that has HTTPS, the content of your communication is encrypted (e.g., entering your Facebook login credentials or messaging via Messenger) and the VPN provider can't see it, but still has access to metadata (e.g., connection time, session length, domains visited).
• This is why it is important to use a trusted VPN with a clear privacy policy, e.g. "no-logs" (no history logging). A VPN increases security, but you have to trust it because your data passes through its infrastructure.