PASSWORD MANAGERS FOR SMALL & MIDSIZE BUSINESSES: ZATIK'S SAFETY BAR RATING

Summary from the TLDR InfoSec newsletter

Zatik created a Safety Bar Rating to evaluate 5 password managers on features such as MFA, SSO, RBAC, audit logs, force logout, password complexity policies, encryption in transit, and support for data destruction requests. Zatik found that BitWarden had all of the features that it was testing for other than force logout and that LastPass and 1Password supported all 9 features. Zatik recommends distinct password managers over those in browsers or mobile devices and they can be centrally managed. Zatik concludes by addressing the LastPass hack by showcasing some of the efforts that LastPass has taken to improve security since then.