Moreover, they should make sure they use industry-accepted cryptography and key sizes.no customized cryptography.” They should also offer rewards for outsiders who find and report bugs (e.g., bug bounties). He adds, “Password manager companies should also do internal AND external code reviews and penetration testing. This means all of their programmers are trained in secure development lifecycle (SDL), which teaches programmers how to avoid common programming mistakes that lead to vulnerabilities, requires the use of secure-by-default programming tools, and builds in security from the very beginning to the end.” “It's a whole lot of things, starting with a password manager company that takes secure development seriously. > This identity management firm is the first big player to ditch passwords (opens in new tab) > The death of passwords is near, so get your business ready (opens in new tab) All fingers and eyes: will biometrics kill off the traditional password? (opens in new tab)

Corporate lastpass