Contact us today!
561-795-2000 
844-795-2001

FRS Pros Blog

Is It Safe to Have Your Browser Remember Your Passwords?

Is It Safe to Have Your Browser Remember Your Passwords?

Let’s be honest - not all of us have the best memories. This makes the ability for many browsers to remember our passwords seem like a godsend. However, is this capability actually a good thing for your cybersecurity? The answer may not surprise you.

Nope!
While yes, the fact that we no longer have to remember each different password for our online accounts may seem ideal, relying on the browser to remember them for us presents a few issues. Each of these browsers leaves some kind of opening for a hacker to review a user’s list of passwords.

Google Chrome - When a user is logged into their Google account, Chrome will automatically save any passwords that user inputs. If a hacker was then able to gain access to that Google account, the entire list of passwords would be available to them.

Mozilla Firefox - Utilizing low-level encryption, Firefox hides a user’s passwords, utilizing a single master password as the encryption key. However, because this encryption has such a low level, a brute force attack can break it. Plus, if someone is in possession of the device itself, they can access the passwords without having to log in.

Safari - Just as is the case with Firefox, Safari stores all passwords in the browser’s settings, where they can be accessed without a login required.

Internet Explorer - When Internet Explorer saves passwords, all it takes to expose them is a readily available tool.

Microsoft Edge - Edge has had some security issues, such as a flaw that enabled hackers to read files that were browser-compatible (like the notepad files that some might keep a list of passwords in). In addition, some third-party password managers, like Edge Password Manager, have failed to require password authentication in the past.

Of course, there are other threats to your password security as well. For instance, a bug that dates back 11 years was discovered early this year that allowed website credentials to be stolen. A secondary form was hidden behind the login form, stealing usernames (which were often just the user’s email) and passwords without the user having any idea.

What Can Be Done?
Your first step should be to disable your preferred browser’s built-in password manager.

Google Chrome - Under the toolbar, select Chrome Menu, and from there, Settings. Scroll down until you can select Advanced, and from there, select Manage passwords (found under Passwords and forms). Finally, switch Auto Sign-in to off.

Mozilla Firefox - In the toolbar’s Firefox Menu, access Options. On the left, access Privacy & Security, and find Forms & Passwords. Find the Remember logins and passwords for websites option and deselect it.

Safari - Select Safari Menu from the toolbar, and then select Preferences and Autofill. Then you’ll need to deselect Using info from my Address Book card, Usernames and passwords, and Other forms.

Internet Explorer - First, you need to reconsider utilizing Internet Explorer, assuming your organization gives you a choice in the matter. If you must, you will want to access the toolbar’s Internet Explorer Menu and select Internet Options. From there, click into Content, and select Settings (found under AutoComplete). Deselect both Forms and Searches and User names and passwords on forms. Finally, save your changes by clicking OK.

Microsoft Edge - Again, from the toolbar, select Edge Menu and from there, Settings. Scroll down to find View advanced settings. Under Privacy and services, deactivate Offer to save passwords, and under Manage passwords, deactivate Save from entries.

We understand, remembering all of your different passwords can be a real pain, but relying on your browser to remember them just isn’t a good option. There are, however, services like LastPass that can store your passwords much more safely behind much more powerful encryption. While these solutions aren’t infallible either, they are a much better choice than entrusting your browser.

For more help managing your business IT and its security, give FRS Pros a call at 561-795-2000.

Getting to Know Technology: Breadcrumbs
Here Is a List of this Year’s Most Devastating Hac...
 

Comments

No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Guest
Tuesday, May 21 2019

Captcha Image

Mobile? Grab this Article!

QR-Code

Tag Cloud

Tip of the Week Security Technology Best Practices Internet Privacy Network Security Business Computing Google Productivity Cloud User Tips Business Management Tech Term Microsoft Hackers Innovation Hardware Software Efficiency Mobile Devices Malware Computer Windows 10 Hosted Solutions Data Backup Browser Smartphone Data Recovery Cybersecurity Smartphones Office 365 IT Services Data Windows IT Support Outsourced IT Apps Internet of Things Android Backup Data Security Email Upgrade Communication Cybercrime Business Continuity Disaster Recovery Workplace Tips VoIP Operating System Communications Network Alert Saving Money Phishing Law Enforcement Ransomware Server Users Gadgets Mobile Device Management Vulnerability Business Money Small Business Passwords Miscellaneous IT Support Virtualization Social Media Managed IT Services Information Employer-Employee Relationship Applications Wireless Cloud Computing Spam Chrome Best Practice Microsoft Office Automation Collaboration Artificial Intelligence Managed IT Services OneNote Information Technology Windows 10 Save Money Computers Managed Service Provider Blockchain Managed IT Facebook Two-factor Authentication Router Unsupported Software Health Bring Your Own Device Telephone Systems Tech Support App Google Drive Networking Holiday Word Devices Gmail Mobile Device Wi-Fi Robot Data Breach Audit Update Data Protection Politics Meetings The Internet of Things Shortcut Travel VPN iPhone Budget Excel Access Control File Sharing Wireless Technology Managed Service BDR IT Management Printing Fraud Data Management Cost Management Mobile Security Augmented Reality Evernote WannaCry Quick Tips Productivity Commerce Hosted Solution Google Assistant User Error Sports Application Avoiding Downtime Mobility Search Hybrid Cloud Encryption Telephony Safety Cortana Proactive IT Password SaaS Conferencing Risk Management Touchscreen Data Storage Business Technology Patch Management Wireless Charging Hacking Government Google Docs Project Management WiFi HBO Hard Drive Display Entertainment Windows Ink Virtual Assistant E-Commerce Gifts Computing Windows 10s Identity Theft Licensing Updates Computer Care Nanotechnology Memory Human Resources Comparison Screen Mirroring Humor Testing PC Outlook DDoS Computer Forensics Peripheral Microsoft Excel IT budget Files Unified Threat Management Bandwidth YouTube Office Solid State Drive Chromebook Personal Information Co-Managed Services Google Maps Spyware Disaster Alexa for Business Payment Cards Credit Cards App store Recovery Vendor Management Microsoft Word Root Cause Analysis Financial Payroll Specifications Virus Emails Cast Camera Scam Paperless Office Computer Fan Reputation Management Upgrades Employees Administrator Hard Disk Drive History Telephone Apple Data storage Employee Education Projects Samsung Tablets Maintenance Lithium-ion battery Remote Computing Security Cameras Sales Proactive Streaming Media Marketing BYOD Sync PowerPoint Admin Storage Social Engineering Vendor OneDrive Access IT Solutions Hyperlink Legal Edge Settings Break/Fix FAQ Identity Antivirus NFL eWaste Machine Learning Retail Websites Chromecast Webinar Transportation Wireless Internet Saving Time Identities Consultant Laptop Employee-Employer Relationship Voice over Internet Protocol Charger Internet Exlporer Private Cloud Value Wasting Time Data Loss Ciminal Remote Monitoring Medical IT Battery Data Privacy Windows 7 Device Security Amazon Downtime Hacker Data Theft IT solutions Adobe Workers Uninterrupted Power Supply Going Green Social Gamification Keyboard Shortcuts Emergency Legislation Language Touchpad iOS WIndows Server 2008 Accessory Software as a Service 5G Point of Sale Sabotage HaaS End of Support Keyboard Relocation Black Market Cleaning Big Data Automobile Managing Stress USB Worker es How To Books PDF Mobile Computing Video Games Experience Hiring/Firing Work/Life Balance Virtual Reality Crowdsourcing Employer Employee Relationship Thank You Current Events Electronic Medical Records Text Messaging Phone System Cache Compliance Benefits Printers Save Time Computer Accessories Congratulations Training Monitors Office tips Flexibility Music Advertising Regulation Smart Technology Television CrashOverride Instant Messaging Company Culture Twitter Scalability Analytics