Without technical help, it is hardly possible to use a separate, long and random password for every service. In practice, this leads to reused passwords, sticky notes or spreadsheets with credentials. A password manager solves this problem: employees only have to remember one strong master password, or they sign in with a passkey or biometrics.
How does a password manager work?
The password manager stores credentials in an encrypted vault. With many solutions, encryption already takes place on the device, so the provider cannot read the contents. This principle is often called zero-knowledge architecture. Browser extensions and apps recognize sign-in pages and fill in the matching data. Because the match is based on the website address, autofill also protects against some phishing sites: on a fake domain, the manager does not offer any credentials.
Business solutions add central functions:
- shared vaults for teams, for example for access to supplier portals,
- roles and permissions defining who may see or change which entries,
- logging of access and changes,
- connection to central identity management and revocation of access when someone leaves.
Typical examples
- The marketing team shares access to social media accounts without sending passwords by email.
- The IT department manages credentials for network devices and management interfaces in a separate, restricted vault.
- When a person leaves, their shares are revoked centrally and the affected shared passwords are changed.
What companies should keep in mind
- Choose a business solution with central management instead of private individual solutions.
- Protect access to the password manager itself with multi-factor authentication.
- Regulate emergency access and recovery so that critical access does not depend on a single person.
- Check the provider's storage location, encryption method and data protection.
- For highly privileged access, also consider privileged access management.
How it differs
Password stores built into browsers offer similar basic functions for individuals. For business use, however, they often lack important functions, such as shared vaults with roles, central management and logging.
How TOMORIS relates
For password management in companies, TOMORIS offers the GRID building block GRID.pass. Individual credentials can be passed on with GRID.WHISPER via limited, browser-encrypted links.
View GRID.pass