Password Manager
A password manager is an application that securely stores, generates, and autofills passwords and other credentials, enabling users to maintain unique, complex passwords for every account without memorizing them.
Understanding Password Manager
The average person has dozens to hundreds of online accounts. Reusing passwords across accounts is a serious security risk: when one service is breached, credential stuffing attacks try the same username and password combination across thousands of other services. Password managers solve this by generating and storing unique, complex passwords for every account. The user remembers only the master password for the password manager itself. Modern password managers include 1Password, Bitwarden, Dashlane, and the built-in password managers in browsers and operating systems.
How GAIA Uses Password Manager
GAIA itself never stores your passwords — all integrations use OAuth tokens rather than credentials. Using a password manager for the various accounts you connect to GAIA ensures those underlying accounts are secured with unique, complex passwords, protecting the data GAIA can access.
Related Concepts
Two-Factor Authentication (2FA)
Two-factor authentication (2FA) is a security mechanism that requires users to provide two separate forms of verification before accessing an account: something they know (password) and something they have (a code from an authenticator app or hardware key) or something they are (biometrics).
Single Sign-On (SSO)
Single sign-on (SSO) is an authentication mechanism that allows users to log in once with a single set of credentials and gain access to multiple connected applications without re-authenticating for each one.
OAuth
OAuth (Open Authorization) is an open standard for delegated authorization that allows a third-party application to access a user's data in another service without requiring the user to share their password.
Phishing
Phishing is a cyber attack that uses deceptive emails, messages, or websites to trick recipients into revealing sensitive information such as passwords or financial data, or into taking harmful actions.
