Password manager apps: Why you could be a “hacker’s dream” without one

Cloud computing and web-based apps have undoubtedly improved business efficiency. But once you and your team start using various online apps, one aspect quickly becomes inefficient (not to mention downright annoying): having to repeatedly enter usernames and passwords to log in. 

It’s bad enough having to enter a multitude of login credentials when you first open the apps each morning. But many apps automatically log you out if you haven’t been using them for a few minutes. And while it’s a nice security feature, it means you have to repeat the entire process whenever you take a breather. 

Wouldn’t it be great if a ‘master control’ app could automatically enter your username and password whenever an app asked for them? Of course, you’d have to log into the master control app first, and that login process would have to be very secure. But just imagine how much time and frustration it could save. 

The good news is that, to quote an all-too-familiar phrase, “There’s an app for that”. In fact, there are quite a few password manager apps available. 

And you really should be using one. 

Why you shouldn’t enter your passwords any other way 

“But I don’t need a password manager app,” you say. “I use the same username and password for all my logins, so it’s pretty easy to remember.” 



Congratulations. You have become what’s known in the online world as “a hacker’s dream”. 

Why? Because once a hacker figures out your username and password on one site, they can use the same username and password to access every other site you use. And before you assume they couldn’t possibly know the other online sites you use, they can run a program that tries your username and password on hundreds—if not thousands—of sites in a matter of minutes. It’s not a question of whether they’ll find those other sites. It’s only a question of when. 


“But it’s more convenient doing it this way,” you might say. 


Sure it is. For now. But you may think differently when every online system you use—online banking, email, social media, etc.—has been compromised. 


Even if you discover the security breach straight away, it can still take months—if not years—to recover. You could lose your savings, your business, or even your identity. 


But there’s no point creating different usernames and passwords for each site if you’re just going to put them on sticky notes. Whether it’s a physical one on your whiteboard or an electronic one in your computer, they’re still incredibly easy to find and use without your knowledge. 


How about storing them in a note-taking app such as Evernote or OneNote? Without any form of encryption, these apps aren’t much better than the sticky note app on your computer. 


And for goodness sake, don’t email them to yourself so you can use a keyword search to find them. Not only will they be stored without any encryption, your email can easily be intercepted and read. 


So, unless you have a perfect memory and can type incredibly fast, the only real solution to having unique, secure passwords is to use a password manager app. 

Here are six reasons you should use a password manager app. 

1. You’ll no longer be “a hacker’s dream”. With password managers you only need to remember the username and password for the app. Then, whenever you access a secure website, it will look up the username and password you created for the site (which are securely stored online) and enter them automatically.

Because you don’t need to remember them all you can use a different username and password for each site, which is far more secure than using the same one for them all.

And if someone gets access to one of the sites you use, they still won’t be able to access any others. 

 

2. You can use more secure passwords. The most secure passwords use a combination of upper- and lower-case letters, numbers and special characters. But when you have to remember them (and type them in over and over again), it’s tempting to use simple passwords that are less secure.

With a password manager, you can make them as long and complex as you want because it’s the password manager app that remembers them all and types them in for you. It can even create new passwords automatically, such as “Sp?45AqG&&l6p#BzK”. 


These random, nonsensical passwords are far more secure than the names of your pets, family members, favourite movie or other commonly used passwords. And the chances of hackers guessing your password, even with the software they use to generate them automatically, is extremely low.

All you need to do is 
choose a strong password for your password manager.

 

3. Your login details will be encrypted. If you’re worried whoever created the password manager will have access to all your usernames and passwords, relax. All of your information is encrypted (scrambled), and only the strong password you use to log in can decrypt (descramble) that information. It’s the same level of security used with Internet banking, and a lot more secure than sticky notes.

 

4. You can use two-factor authentication for even better security. Let’s say someone works out the username and password you use for a website. That means they can log onto the site, enter your details and they’re in, right?

Not if you’ve set up two-factor authentication. Instead they’ll be asked to provide another piece of information only you can provide. It could be a random code to your mobile number via SMS, or one only your phone can generate. It may even ask for your fingerprint via your smartphone.

And without that other bit of information, they won’t get access.

Two-factor authentication can be used not only on websites, but also the password manager itself. And while some people find the extra step inconvenient, it’s an added layer of security that’s well worth considering. 

 

5. You can share passwords more securely. Let’s say you need to give a staff member or contractor access to financial or other sensitive data (a common scenario when working with freelancers and remote workers). One option would be to give them a username and password, which they would enter to access the information. But what’s stopping them from writing them on a sticky note, or emailing the details to themselves (or worse, someone else)?

With a password manager you can set them up with a password that is never revealed to them. It will log them in, but they never see what it is, and therefore can’t share it or even write it down.

 

6. You can revoke a person’s passwords instantly. When people leave your organisation for whatever reason, you need to make sure they can no longer access your information. If they’ve written their passwords down somewhere you have no choice but to manually change or remove the password on every system they had access to.

But with a password manager you can revoke all of their logins easily—and instantly.

How to get started with a password manager 

If you love evaluating apps and technology, check out the apps mentioned earlier and see which one best fits your needs. 


But if you want to start using a password manager straight away, choose LastPass. It lets you have a Free or Premium plan for your personal accounts and an Enterprise plan for your business. You can even link your personal and business LastPass accounts so all your logins are in the your own LastPass view. This saves you having to log in and out of separate LastPass accounts whenever you need to switch from a business-related web app to a personal one.

And don’t worry. Even when you link your personal and business LastPass accounts, team members using your LastPass Enterprise account still won’t be able to see or access your personal logins. 

It really is the perfect combination.


Need help with your accounting?

Find Out What We Do
September 14, 2026
In your 50s and thinking about retirement? Discover 10 practical strategies to boost your super and get your retirement savings on track.
September 14, 2026
Buying your first home? From deposit schemes to stamp duty concessions, here are 5 government schemes that could help you get into the market sooner.
September 14, 2026
A new way to claim work-related expenses is coming for the 2027 tax return — but there is an important catch. From 1 July 2026, eligible taxpayers can claim a standard deduction of up to $1,000 for certain work-related expenses, without having to substantiate each expense individually. Sounds simple enough. But before you assume you can claim $1,000 on top of everything else, there are a few things you need to know. The $1,000 Is the Maximum The new standard deduction is capped at $1,000. It is designed to cover certain common work-related expenses, such as work-related phone and internet, home office expenses, stationery and some travel expenses. You can't claim the $1,000 and then claim those same expenses again separately. If you have actual work-related expenses of more than $1,000, you can continue to claim your actual expenses under the existing rules, provided you meet the requirements and have the records to support them. Do I Still Need to Keep My Receipts? Yes: and this is where it is worth being organised. If you use the standard deduction, you don't need to substantiate the individual expenses covered by it. But if you think your actual work-related expenses could be more than $1,000, keeping your receipts and records throughout the year will allow you to claim your actual expenses instead. There are also some deductions that aren't covered by the standard deduction and can still be claimed separately if you are eligible. It's for Your 2027 Tax Return The new deduction applies from the 2026–27 financial year, so you won't use it for the tax return you are preparing now. It will first apply to your 2027 tax return, lodged from July 2027. Is the $1,000 a $1,000 Tax Refund? No. The $1,000 is a deduction from your taxable income. It doesn't mean you'll receive an extra $1,000 back from the ATO. The value of the deduction will depend on your individual tax circumstances. What Should You Do Now? The best thing you can do is keep track of your work-related expenses throughout the 2026–27 financial year. When it comes time to prepare your 2027 tax return, we can look at your circumstances and determine whether the standard deduction or claiming your actual expenses is likely to give you the better outcome.  At Ascent Accountants, we can help you make sense of the new rules and make sure you're claiming the deductions you're entitled to: without claiming the same expense twice!
By Nigel Parker August 13, 2026
Late paying super under Payday Super? Learn the new deadlines, penalties, and the one step that can reduce your Administration Uplift charge.
By Nigel Parker August 13, 2026
Received a business name or company renewal notice that looks official? Learn how to spot a fake ASIC notice before you pay.
By Nigel Parker August 13, 2026
Negative gearing is changing from 1 July 2027. Find out what it means for established properties, new builds, and your next investment.
More Posts