Loading story…
NordPass, developed by Nord Security, provides a comprehensive password management solution with both free and premium tiers, supporting features such as autofill, password health monitoring, secure sharing, and emergency access. The service is accessible across all major platforms, including web, desktop, and mobile, and requires users to create a Nord Account for access. NordPass is highlighted for its user-friendly interface, robust security, and flexible subscription options for individuals, families, and businesses.
Google Chrome's built-in password manager offers users the ability to save, manage, and autofill credentials directly within the browser, streamlining credential storage and reducing password fatigue. The Chrome password manager can be configured through browser settings, supports synchronization across devices, and provides enterprise controls for IT administrators to enforce access policies and monitor credential hygiene. Both solutions aim to enhance password security and convenience for users and organizations.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A new report from password manager 1Password highlights that weak or compromised passwords remain a significant security risk for organizations, with employee password practices worsening despite increased awareness. Survey data from over 5,000 workers across multiple countries reveals that a majority of employees, including IT professionals, continue to reuse passwords, rely on default credentials, or share passwords via insecure channels, exacerbating the threat landscape for businesses. The report underscores that even as companies move toward passwordless authentication, the transition is gradual and current credential management practices are not keeping pace with evolving threats. In response to these challenges, technology vendors are accelerating the adoption of passwordless solutions. Microsoft has released Edge version 142.0, introducing cross-platform passkey synchronization, allowing users to securely reuse passkeys across devices and browsers. This feature, which requires a dedicated PIN for access, aims to enhance both security and usability, reducing reliance on traditional passwords. The move reflects a broader industry trend toward passkeys and multi-factor authentication as default options, with major platforms like Google and Meta also embracing passwordless technologies to mitigate the risks associated with password-based authentication.
Jun 29, 2026
Google introduced an Android-mediated migration workflow that moves passwords and passkeys directly between compatible password-manager apps. Users start an import in their destination manager; Android identifies eligible installed source managers, then requires the user to review and authorize the transfer in the source app. The feature eliminates the legacy practice of exporting credentials to downloadable, unencrypted CSV or text files and enables passkey migration, which was previously unavailable through typical export methods. **Google Password Manager**, **1Password**, **Bitwarden Password Manager**, and **Dashlane** support the transfer flow, with additional partner support planned; Google has not detailed the Android versions supported or the technical protections used during inter-app credential transfer.
Sep 11, 2026
Password managers have become essential tools for users managing a growing number of online accounts, but they are also increasingly targeted by cybercriminals. Attackers may attempt to compromise master passwords through brute-force attacks, exploit software vulnerabilities, or use phishing techniques such as malicious ads to trick users into revealing their credentials. Security experts highlight the importance of vigilance and adopting best practices to mitigate these risks, as unauthorized access to a password vault can lead to identity fraud or the sale of sensitive credentials on underground markets. In response to evolving authentication needs and security threats, Microsoft has introduced native support for third-party passkey managers in Windows 11, including 1Password and Bitwarden. This integration, enabled by a new passkey API, allows users to manage passkeys—secure authentication credentials based on FIDO2/WebAuthn standards—directly within Windows. Passkeys offer enhanced security by leveraging public-private key cryptography and are resistant to phishing attacks. The update also brings native integration of Microsoft Password Manager, providing users with more flexibility and security options for managing their digital identities.
Jul 12, 2026