What is the most secure way to store passwords on your mobile device?

The one and most secure place to store your passwords is your BRAIN. Always try to memorize your passwords rather than storing it. Still if it is necessary to store passwords digitally then these points will be useful.... --> Use application KeePass for storing multiple passwords. --> Enable Multifactor Authentication (if available use 1 as biometric). --> Use Authenticators like Microsoft or google for TOTP based login. --> Keep updating your passwords periodically --> Also while creating any password, does not use same password everywhere or does not not follow any specific pattern (like phone number, DOB etc.)

Don't. This question is for mobile devices, assume excluding laptops, i.e. phones. Key chains are ok if there is a second factor, or multi factor, mechanism to retrieve. Biometrics is an option if available, and is currently being deployed across platforms. In these instances it will be more secure. But don't store it on the device, Mobile apps or web apps can access a back end to retrieve. And that is the Silver Bullet answer for tonight.

The password manager apps securely store your passwords and can generate strong, unique passwords for each of your accounts. They often use encryption and require a master password or biometric authentication to access your stored passwords. Popular password manager apps include LastPass, 1Password, and Dashlane. They make it easy to manage and protect your passwords across all your devices.

its imp to look at tool that allows you to sync passwords across mobile & web, hence use purpose build password manager that works across both these devices.

In the best of worlds every time you sign up for something over the cloud you would have a unique username and password with special characters, capital and lower case letters with numbers. Although all forms of encryption can be cracked we want to extend the time it would take to crack the passwords as far out into the future as possible. Password managers help make the ideal situation the norm by letting you store all those unique combinations into a encrypted space. Allowing a person to push the time taken to crack a password to be longer than a lifetime.

multi-factor authentication is a must have for all your critical applications & the bare minimum is to have 2-factor auth. (a bio-metric 2nd factor auth is best one)

Biometric authentication is wonderful as a technology and would definitely keep most people out of your devices. The technology isn't perfect so it is important to ensure you have a back up option just incase.

Enabling biometric authentication like fingerprint,face etc will ensure that no-one can unlock your device if you have left it by mistake. Another advantage of biometric authentication is that you do not have to remember the password or the unlock code. Other alternatives are using passkeys which can be stored and even transferred when you move from one device to another.

Biometric authentication adds an extra layer of security as it relies on your unique physical characteristics. It's convenient and helps to protect your passwords from unauthorized access.

Biometric authentication is a great solution on its own and also to secure saved passwords. This can really make the use of security easy and flawless when impleneted in the right way. When the HW or SW implementation is faulty it is a nightmare and just wastes your time at each login.

The most secure way to protect your password on public Wi-Fi is to use a Virtual Private Network (VPN). It encrypts your internet connection, making it more difficult for others to intercept your data. Additionally, ensure the websites you visit use HTTPS for added security. Avoid accessing sensitive accounts or entering passwords on public computers to minimize risks.

Always use WiFi/BT in an environment that you trust. Publicly accessible WiFi/BT device are prone to misuse & will always have malware hidden. Better to be safe than sorry.

Keep all applications updated and use a reputable password manager that encrypts and protects your passwords with a strong master password. Regularly update your master password and enable two-factor authentication.

Maybe in your head? Keep your passwords locked and secured in your head. That should have been an option. Unfortunately our modern conveniences have helped deteriorate our available memory space, and we keep relying on other means to store essential, sensitive information. Or even off-device on a paper tracker.

Software upgrades on your devices are needed to keep the device protected. Updates are need to ensure device performance & security are not impacted.

For personal use being up-to date is easy and essential. Think of about your devices as your home, when you buy secure doors, windows, locks, alarm etc. You try to be as much up to date and secure as possible, why would it be different with IT devices.

Not all sites support it, but if at all possible, set up your 2FA to verify your access across separate devices (i.e., if your login and password is on your laptop, set up a push notification to be sent to your mobile). This way, even if one of your devices is compromised, your account will still be secure.

Unfortunaly you can't be sure that your email or phone number may not end up at bad people. Even if you try to avoid scams during a busy day making a quick decision can be wrong. 2FA is providing you an extra step. Are you the one initiating that transaction? Do you really want it to be executed?

SMS/whatsapp/messages on social media sites are all routes used to distribute malware. just following what others are doing can be dangerous for you & your security. Hence, never click on links or download images or videos from unknown sources.

Write them in a paper and store it in a book. No one reads anymore. Mine are into page 200 of Quantum Electrodynamics. Pretty safe. (Book and page number are fictitious for security reasons)

I don't store passwords in my mobile, as I can memorize 10 character strings fairly easily. Two factor authentication is a bit worrisome when the check call comes back to the same mobile. Some services require the use to log in to a different account to check the authorisation, which I think is a bit better.