Comparing Password Management Software: Toward Usable and Secure Enterprise Authentication

Abstract

Abstract-In today's corporate IT systems there is an undeniable pattern that is routinely repeated by employees: access to a huge number of password-protected services. In this regard, though deploying a strong enterprise password policy is a mean to increase security against online breaches and data leaks, it also imposes a significant usability burden for users. To alleviate this problem, Password Managers (PMs) are pointed out as user-friendly tools that automate the processes of password generation and login. But how secure and usable are these tools? In this paper we analyze the four most popular PMs with free version from both security and usability perspectives. The comparison leads to recommendations on enterprise PM selection, as well as to the identification of new lines of research and development on usable authentication.

Analisis Perbandingan Kinerja dan Kegunaan Aplikasi Pengelola Kata Sandi Closed-Source berdasarkan ISO/IEC 25010

“…Layanan tersebut mengharuskan pengguna untuk membuat akun terlebih dahulu agar mendapatkan akses. Semakin banyak layanan yang digunakan menyebabkan pengguna harus mengatur dan mengelola akun serta sandi di setiap layanan yang berbeda (Cabarcos et al, 2016).…”

“…Selain itu, terdapat beberapa penelitian mengenai aplikasi pengelola kata sandi yang telah dilakukan sebelumnya. Penelitian tersebut yaitu penelitian oleh (Cabarcos et al, 2016) tentang analisis perbandingan keamanan dan kegunaan aplikasi 1Password, LastPass, KeePass, dan Dashlane berdasarkan NIST SP 800-57 part 1, rev. 4 dan Whitney Quesenbery, dengan hasil aplikasi 1Password memiliki kegunaan lebih unggul dibandingkan dengan aplikasi Lastpass, penelitian oleh (Schougaard et al, 2016) perbandingan kesesuaian fungsi dari beberapa aplikasi pengelola kata sandi pada platform cloud berdasarkan functional dan non-functional requirement, hasil yang didapatkan adalah aplikasi Vaultier memiliki tingkat kesesuaian fungsi yang lebih tinggi dibandingkan dengan aplikasi Lastpass dan aplikasi lainnya.…”

“…Hasil ini berbeda dengan penelitian sebelumnya, dilakukan uji kegunaan pada aplikasi Lastpass dan 1Password berdasarkan NIST SP 800-57 dan Whitney Quesenbery. Hasil yang didapatkan adalah aplikasi 1Password memiliki kegunaan lebih unggul dibandingkan dengan aplikasi Lastpass (Cabarcos et al, 2016). Pada penelitian ini diketahui bahwa nilai kegunaan pada aplikasi Keeper lebih tinggi dibandingkan dengan aplikasi Lastpass, dan 1Password berdasarkan ISO/IEC 25010.…”

Password Managers—It’s All about Trust and Transparency

“…A previous study [7] found that writing passwords down in a secure location or using password managers can be a promising solution for password reuse. Password managers offer the benefits of having strong passwords and uniqueness, compared to other entry methods [22], while they improve usability by offering autofill login forms [27]. Moreover, password managers generate, store and encrypt passwords, while users need only remember one master password [28]; Komanduri et al state that users create stronger passwords when they use memory aids, which can encourage them to use password managers [29].…”

“…Regarding the seven tasks in this study, the idea for these tasks comes from a pioneering study by Chiasson et al [10]. These tasks were also applied in another study [16,27]. The usability test has seven tasks because LastPass has many features and functions within it.…”