What is the most reliable and easy to use password manager out there?

Security & GRC
22.3k viewscircle icon12 Upvotescircle icon25 Comments
Sort by:
Group IT Manager in Travel and Hospitality6 years ago

Lastpass is quite effective.
Combine it with their Authenticator app and you have a solid solution.

If you prefer open source tools Bitwarden is a good contender specially for deployment on your own infrastructure.

Lightbulb on1 circle icon1 Reply
no title6 years ago

Call me paranoid but I wouldn’t combine password manager with 2FA app from the same provider.

CIO & Digital Transformation Advisor - Independent Consultant in Software6 years ago

Whilst there are many opensource and paid solutions available, I would recommend KeePaas tool which is very comprehensive and offer enough security controls.

Director of IT in Education6 years ago

Lastpass

COO in Healthcare and Biotech6 years ago

Keeper

ISSO and Director of the IRU in Healthcare and Biotech6 years ago

I recommend last pass too.

Content you might like

Does your organization leverage an Enterprise Architecture Solution/Tool for EA Practice?

Yes76%

No17%

We are in the process of selecting an EA tool8%

View Results

I'd like to discuss the privacy and data security implications of compromised accounts where a CoPilot (such as Microsoft's) is profiled on an account. It's clear that this poses a significant security risk, as a CoPilot with access to all our Graph services presents a unique attack vector. Those interested in learning more about what can be accessed and seen should feel free to ask. In cases where an account has been hacked, a thorough data-mining activity is often necessary to assess the extent of the breach. Have you thought about?

I don't have any concern about.16%

I feel there is a gap... but I haven't thought about before75%

I already have something on track to fix it6%

Other1%

View Results

Have you evaluated any “AI native” data security platforms so far (like Concentric AI, Normalyze, etc)? Interested to know your thoughts on these, whether or not you move forward with implementing.

As part of our NYSE IPO prep, we’re debating how to communicate our system hardening efforts in regulatory disclosures (e.g., SEC Form 20-F, SFC).

Would you recommend sharing % compliance (e.g., “85% CIS Tier 2”) or sticking to qualitative descriptions of how we identify and mitigate risks? Also, do SFC/ISO 27001 expectations require full ISMS integration, or is a % model acceptable?

We’re preparing for an IPO on the NYSE as a Foreign Private Issuer and evaluating CIS Benchmarks to measure OS and database hardening.

Our proposed tiers:
• Tier 1 (70–80%) baseline
• Tier 2 (85–90%) for sensitive data
• Tier 3 (95–100%) for mission-critical systems

Is 80% compliance defensible for IPO due diligence with SEC or SFC? Should Tier 3 be considered mandatory for critical systems? And can compensating controls (e.g., PAM, microsegmentation) offset gaps in legacy environments?