Top

Using Your Browser To Save Passwords Is Not Secure

January 27, 2010 by Paul 

Using the autocomplete function in Internet Explorer to save user names and passwords or having Firefox remember passwords for sites is not a secure method of storing passwords.

I was recently checking out a handy little utility program called System Information for Windows when I clicked on an icon called ‘Secrets’ and BAM! there were all of my user names and passwords that were stored in my Firefox browser.

Eeek! I did a little research and found free utilities that can access your Firefox and Internet Explorer saved passwords – a potential security hole a mile wide. The video below shows the problem and what to do about it.

Get the Flash Player to see this content.

The solution for Firefox passwords can be adding a master password that you enter each time Firefox starts and you go to a page that needs your user name and password. It stays in effect until you close Firefox.

There’s no remedy for Internet Explorer other than to disable autocomplete. While the passwords are encrypted, all you need is to be logged into your Windows profile to access the passwords.

The video also shows how to turn autocomplete on and turn autocomplete off in IE and to clear your autocomplete file.

One solution discussed is RoboForm. It cost $29.95 but may be worth it. It sits in your browsers and stores encrypted passwords, name, address, etc. for use as needed.

If anyone out there has another solution please comment below..
————————
Subscribe to Home Office / Small Business CenterHOSB RSS Feed

powered by shantz-wp-prefix-suffix

Comments

One Response to “Using Your Browser To Save Passwords Is Not Secure”

  1. Pedro on January 30th, 2010 1:47 pm

    Yes, using Browser to save passwords is really not secure. That is why I use password management product called Sticky Password. Very secure, protected by one password and easy to use.

    http://www.stickypassword.com

Feel free to leave a comment...
All comments need to be approved, but the 'nofollow' attribute has been removed.





  • Home Office Small Business Advisor

    Sign up for our free newsletter and stay informed on small business news and relevant topics...

    Your name (First, Last):


    Email address:

  • Answer This Question

    What Operating Systems do you use?

    View Results

    Loading ... Loading ...
  • Recommended

Bottom