Why you should never allow your web browser to save your passwords

rajamit.raj03

Passwords. They are the bane of so many users' existence. Yet, they're one of the only ways we have to secure our accounts, and those accounts are frequently compromised. IT pros always harp on users to create secure passwords--to the tune of creating password profiles that demand specific requirements.[br][br] [br][br]Why?[br][br]First off, even after being constantly warned, users still insist on passwords like 12345 or password. Even when those users employ incredibly complex passwords, there is still a roadblock in the way of enjoying a truly safe networking experiencing. Said roadblock is when a web browser is allowed to store passwords.[br][br]Sure, it's convenient. After all, who wants to type a password every single time it's requested? When you make use of a large number of online services, typing a password each time you use said service can disrupt your productivity. And when those passwords are incredibly complex, such that you must use a password manager, efficiency goes out the window.[br][br]And yet, even at the expense of productivity, there's a very good reason why you should never allow a web browser to remember your passwords. That reason is how easy it is to view passwords in modern web browsers. Chrome will allow users to view passwords, even without requiring a master password. Firefox, on the other hand, at least requires a master password, but only if one is set (which many users either overlook or aren't aware of its existence). Like Firefox, Safari at least hides passwords behind a user's password. The difference between Firefox and Safari is the password isn't optional in Apple's browser.[br][br]How easy can you view saved passwords?[br][br]Update: If you're using the Windows 10 platform, you will be prompted for a user password, in order to access saved passwords in Chrome.[br][br]Let me demonstrate how easy it is to view saved passwords on the three browsers mentioned. Remember, this only works on passwords that are stored by the browser. First, we'll look at Chrome (as it is the most vulnerable). To view saved passwords in Chrome, do the following:[br][br][ul][li]Open Chrome.[br][/li][/ul][ul][li]Click the Menu button and select Settings.[br][/li][/ul][ul][li]Scroll to Autofill and click Passwords.[br][/li][/ul][ul][li]Locate the password you want to view and click the "eye" icon (Figure A).[br][/li][/ul][ul][li]Enjoy that password.[br][/li][/ul][br] [br][br]To do the same trick in Firefox, do the following:[br][br][ul][li]Open Firefox.[br][/li][/ul][ul][li]Open the Menu and select Preferences.[br][/li][/ul][ul][li]Click Privacy & Security (from the left pane).[br][/li][/ul][ul][li]Scroll to Logins & Passwords.[br][/li][/ul][ul][li]Click Saved Logins.[br][/li][/ul][ul][li]Click Show Passwords (Figure B).[br][/li][/ul][ul][li]Enjoy your passwords.[br][/li][/ul][br] [br]The only caveat to the steps in Firefox is if a Master Password is in use. Should that be the case, you'll be prompted for that password, after clicking Show Passwords. Without the Master Password, you cannot view stored credentials.[br][br]What to do?[br][br]The answer to this question is simple. Don't allow your browser to save your passwords. None of them. Not one. If you do, those passwords are vulnerable. All someone has to do is have access to your computer (remote or physical) and, unless you use Safari or the Master Password feature in Firefox, those passwords are available for anyone to see.[br][br]If you absolutely must have your browser store your passwords, and you're not using macOS, make sure to use Firefox and enable the Master Password feature. Use Chrome at the peril of your passwords.[br][br]In place of having your web browser store your passwords, make use of a password manager. By doing so, the likelihood of someone viewing your passwords is considerably lower. It's not perfect, but it's far better than handing over the security of your passwords to a web browser.[br][br]The adage, "Better safe, than sorry," most certainly applies.[br][br][br][br][br]

Thinesh

Nice share

dr.gautam

good info, thanks for sharing.