header-left
File #: 2024-0267    Version: Name: Bitwarden Password management
Type: MOTION Status: IN COMMITTEE /COMMISSION
File created: 4/1/2024 In control: Technology Commission
On agenda: Final action:
Title: Bitwarden Password management
Attachments: 1. Bitwarden Quote _ Village of Orland Park _ 100 _ 2024 Enterprise
Title
Bitwarden Password management
Body
In trying to further secure the Orland Park environment, the Village is looking at installing a password manager. While a lot of systems supported by the Village use Microsoft AD pass through for authentication, there are still a lot of systems that have unique user names and passwords. Having multiple user names and difficult to guess passwords leads to security risks as either passwords are shared among different systems, the passwords are written down or they are stored in non-secure media such as Excel spreadsheets. The reasons for a password manager are as follows;

Security: Password managers generate strong, unique passwords for each account and store them securely. This eliminates the need to remember multiple complex passwords, writing down passwords or resort to using easily guessable passwords.

Protection from Password Reuse: Using the same password across multiple accounts is a significant security risk. If one account is compromised, all other accounts with the same password become vulnerable. A password manager helps avoid this risk by generating and storing unique passwords for each account.

Encrypted Storage: Password managers encrypt the password vault with strong encryption, ensuring that even if a device is lost with the password manager software, without the master password there is no access to the passwords stored in the vault.

Password Generation: Password managers generate strong, random passwords that are virtually impossible for hackers to guess. These passwords are typically longer and more complex than those most people would create on their own. Creating and then storing them in the vault will provide greater protection.

Protection from Phishing: Password managers often integrate with web browsers to automatically fill in login credentials. This helps prevent falling victim to phishing attacks, where fake websites try to steal your login information.

Easy Password Management: With a ...

Click here for full text