Blog
Recent
Productivity Tips

Why You Shouldn't Store Passwords in a Browser 

Amber SteelJune 16, 2022
Your browser seems like a safe and convenient place to store passwords. But is it the best option? People often think they don't need a password manager because their browser does it just fine, thank you very much. What many folks don't realize, though, is that a password manager does far more than just store passwords. For security and convenience, password managers are a far superior choice to browsers for both individuals and businesses -- and here's why.

Browsers can save and fill passwords

Yes, the major browsers all have built-in password managers. The browser password managers prompt you to save usernames and passwords. Then, when you return to those websites, the browser will fill in the login information.  In addition, the browser password managers will often sync to the same browser across platforms. So, if you have Chrome on a desktop computer and Chrome on your Android, your data will sync when you log in with the same Google profile. Some of the browsers also save and fill addresses and payment cards.  For the most part, though, a browser password manager is focused almost entirely on saving and filling passwords. Compared to browser password managers, third-party password managers do everything mentioned above - and more. 

Everywhere access outside the browser

A browser password manager only syncs within its ecosystem (Apple to Apple, Google to Google, etc.). In contrast, a password manager supports all major browsers and operating systems and operates independently of the browser. That means more choice and backup options for you when you need your passwords.  Because a password manager integrates into a browser as an extension, users have more flexibility in using their data. Got a Mac laptop and a Google phone? No problem, you can load your password manager on both and have the same data synced between them. A password manager makes sure you always have your passwords, no matter where you are or what device you need to use. Have family members or coworkers that need to use specific passwords? A password manager covers you there, too, by syncing not only across platforms but also between user accounts. By facilitating secure password sharing, password managers make it easy for families, roommates, friends, and teams to collaborate. It also ensures people have access to accounts in an emergency or crisis.

Offline access when you don't have a connection

If you find yourself without an Internet connection or cell service, a password manager still gives you access to your stored accounts. You can look up usernames, passwords, and other stored data.  How? The data you save to the app is locally cached, meaning the password manager app stores a local encrypted copy on the device. So even when you're "offline," you can log in and decrypt your data. You're never out of luck.

What about security?

The makers of popular browsers no doubt take security seriously. Still, very few people ever log out of their browser profile after finishing a browser session. Unfortunately, that means passwords are decrypted and available for anyone with direct access to the device or via malware that can log in with the user's profile, like the recent RedLine malware Instead, a password manager requires a dedicated master password that users must enter to decrypt their stored data. Encryption and decryption happen locally on the device, so the master password is never shared with the password manager service. That means the user and only that user has access to their master password and the sensitive data they've stored in their password manager account. Password managers also make additional security options available and easy to use. For example, users can quickly turn on two-factor authentication so that any login attempts require extra "proof" that blocks unauthorized users from gaining access to the account. 

Browser password managers create risks to companies

For businesses, browser password managers are more often a security liability than a help. IT has no visibility into who has access to which passwords and how they're stored because browser password managers offer no centralized oversight and administration. What if an employee were to quit suddenly, be fired, or go rogue? IT admins may struggle to determine which passwords the employee had access to and revoke that access. Failure to properly offboard employees exposes a company to data breaches and attacks via zombie accounts.  Without a way to ensure compliance with company password policies, IT admins can't know how strong their company's password security is. Given that the majority (some 80%, according to Verizon's DBIR) of data breaches can still be linked to poorly managed passwords, companies should not be allowing users to store passwords in a browser. A business password manager with unified oversight gives password security visibility at the user level, something a browser password manager can't do.

A smarter, safer password management choice

It's not that browser password managers don't do what they set out to do. On the contrary, they make it very easy for people to keep track of the overwhelming number of passwords required to manage their lives. Remembering dozens if not hundreds of passwords can be difficult and stressful, and a browser password manager can help alleviate that stress. But anyone looking to improve their password security, at home or work, shouldn't rely on a browser. A browser password manager offers the bare minimum. In contrast, a third-party password manager like LastPass provides a suite of features to build better password habits and strengthen overall online security. By replacing old passwords with generated ones and leveraging the Security Dashboard to improve password security scores, individuals and businesses can better protect themselves from malicious attacks and data breaches.  It's not enough to store passwords. To be safe online, we need to change the passwords we use and how we use them. We need to build a culture of security around our entire digital lives. A password manager like LastPass makes good password habits the norm and gives everyone the tools they need to manage their password security successfully.  Learn more about how your company can benefit from a business password manager like LastPass here. Want to get started with LastPass today? Click the button below.