📘 How Password Managers Work
You reuse one password everywhere because remembering fifty random strings is impossible. A password manager stores separate records behind one vault lock instead.
What you’ll learn
- VaultsExplain why password managers use encrypted vaults, master secrets, and generated unique credentials.A manager stores many separate account records behind an unlocking boundary so unique passwords become practical.
- Zero-knowledge claimsDistinguish vault encryption, website password hashing, provider access, and recovery tradeoffs.Zero-knowledge is a claim about who can access secret data and keys, not a promise that a service knows nothing.
- AutofillDescribe domain-aware autofill and evaluate the remaining risks around phishing, devices, updates, and recovery.Autofill closes the loop between generation and use, while domain checks and user judgment remain important.
Questions this course answers
What is the main purpose of a password manager vault?
A vault stores many account records behind a protected unlocking mechanism, making unique credentials easier to use.
Why does a vault need encryption that can be reversed by its owner?
Vault contents must be readable to the authorized user, so the vault uses recoverable encryption rather than only a one-way verifier.
What should a zero-knowledge claim make you ask?
Zero-knowledge language should be evaluated as a boundary claim about data, keys, and provider capabilities.
Why can domain matching matter during autofill?
Matching the stored record to the site context can reduce accidental disclosure, although users still need to check the address and device.
What security practice does a password manager make easier?
Generation and autofill remove much of the effort that otherwise encourages password reuse.
Grounded in trusted sources
- https://pages.nist.gov/800-63-FAQ/?pubDate=20250428
- https://pages.nist.gov/800-63-3/sp800-63b.html
- https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html
- https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Elements/input/password
- https://bitwarden.com/resources/zero-knowledge-encryption-white-paper/
Every Wunder lesson is built from real, reputable sources — never invented.
Related courses
Wunder is a personalized learn-anything platform — tell it any topic and it builds a beautiful, fact-checked course in minutes, with narration, a knowledge check, and a college-style University track.
© 2026 Wunder Learning LLC · Terms & Privacy