What I Learned Trying to Secure Congressional Campaigns
Great article, as always.<p>I think one of the key points is how awful password managers are for non-technical people to use. It&#x27;s not necessarily the developers&#x27; fault because it&#x27;s difficult to interact with all the things they need to, but it makes it practically impossible to get someone to use one unless they&#x27;re technical enough to be able to figure out all the random issues that come up all the time.<p>I&#x27;d love to be able to get some non-technical family&#x2F;friends to use one, but there are just way too many times that showing someone how to use a password manager goes something like: &quot;Okay, so now you&#x27;ve generated a password and you click &#x27;Register&#x27; and... oh hold on, the page redirected for some reason and the pop-up to save the account info is gone, so, uh... well, I think there&#x27;s a generated-password history page somewhere, let me just look through the Settings area even though it&#x27;s not a setting... okay, there it is, so it should be this one. I&#x27;ll just copy that and now I have to create a new vault entry for the site manually by typing in everything and pasting this password in there, and then...&quot;<p>It&#x27;s terrible, because a password manager that would just work and stay out of the way could make such a huge difference to general account security, but they all seem to still be difficult to use and require you to have a pretty good understanding of what&#x27;s going on to be able to deal with random problems.