A Security Analysis of the Authentication Mechanism of Password Managers

A password manager is a tool that generates, stores and manages user's passwords for local and online services. The security of the popular password managers relies on their authentication mechanism. This paper gives a brief security analysis of the authentication mechanism of three popular cross-platform password managers. We will analyze their authentication mechanism through a unified security analysis model. Based on this mode and experiments on GPU, we show that the security can be reduced to the master password and iteration number.