Pages:
Author

Topic: Don't auto Save your login details - page 3. (Read 996 times)

legendary
Activity: 2758
Merit: 6830
February 27, 2020, 06:19:57 PM
#32
I've also tried it with Chrome (Brave is just an enhanced version of chrome FYI) but it worked the same. Do you have any proof with your argument?

https://www.isumsoft.com/internet/how-to-see-saved-passwords-in-chrome.html

Probably because you just had unlocked your computer, so it didn't ask for any, or you have something switched off. Using the browser's password manager is dumb anyways. It's much better to use 1Password, Lastpass, Dashlane, etc...
full member
Activity: 840
Merit: 105
★Bitvest.io★ Play Plinko or Invest!
February 27, 2020, 04:42:50 PM
#31
- In order for "show password feature" to fully function in the Chrome browser, you have to know the "windows password" first before you can unhide it...
- Judging by your comment, I guess Brave browser allows its user to access passwords without layer protection, am I right [or you just don't use any passwords on your computer]?

I do have a pin as a security measure in my Windows 10 Laptop and I don't found any additional security measures / protection layer in accessing unhide autofilled passwords, as the browser always prompt users if a password that was inserted in a text field would be save for future password filling.

I've also tried it with Chrome (Brave is just an enhanced version of chrome FYI) but it worked the same. Do you have any proof with your argument?
sr. member
Activity: 896
Merit: 272
OWNR - Store all crypto in one app.
February 27, 2020, 02:45:21 AM
#30
I always make it a point to delete the computer cache and history  I've used when ever I logged in an internet cafe, because some internet cafes are not using a deepfreeze software, so the computer always remember your history and your prints, but I'm glad I'm not going into the cafe since I have a laptop and netbook around
This is very good option because I am also doing this for some long time as one of my friend has some serious problems due to this password reminder mostly I try to avoid public computers because of security but sometime if I have to use then must try to delete all things after use.
It is one of the things that we must do in order to protect our personal data from hackers. It is better to delete the computer cache because in that way, people won't have any access of your accounts. Personally, I don't used any computer aside from my own because I am aware how risky it is. I just don't trust anything or anyone with any of my information that can possibly used against me. We don't know people's real intention and they might just grab that opportunity to exploit our personal data, so we have to be cautious with our actions.
copper member
Activity: 1652
Merit: 1901
Amazon Prime Member #7
February 27, 2020, 01:37:08 AM
#29
If you save your password, the password will be saved on your computer somewhere. If you save your password in a Chrome browser, Chrome will save your password, and you can access any saved password by going to chrome://settings/passwords

If you have your password saved via a password manager, you can access the plaintext password by accessing your password manager, and inputting a password/decryption phrase, if necessary. If you are using public internet of some sort, there is always the risk the internet provider, or someone impersonating the internet provider will change the HTML/JS of any website you are visiting and intercept data you submit via any website if you are not paying close attention.
legendary
Activity: 2968
Merit: 3406
Crypto Swap Exchange
February 27, 2020, 01:20:57 AM
#28
It is not hacking any password if it doesn't involved any password cracking or brute forcing. Saved passwords is already "Saved" then using such html tags isn't necessary. Also, browsers do already have the feature that shows you all saved passwords in it.

You could see it in Settings > Additional Settings > Auto-fill > Passwords > then click on the unhide icon beside the password saved. (I use Brave browser and this is the process of showing saved passwords)

https://i.imgur.com/fr3sTZd.png
- In order for "show password feature" to fully function in the Chrome browser, you have to know the "windows password" first before you can unhide it...
- Judging by your comment, I guess Brave browser allows its user to access passwords without layer protection, am I right [or you just don't use any passwords on your computer]?
legendary
Activity: 2618
Merit: 1181
February 26, 2020, 10:06:31 PM
#27
thank you. Thanks for the compliment, Hope everyone has tested this
Good work and changing the password to "text" seems to function to see the password that has been saved but only on the PC that has been used and the password is stored there.

I have tested it and it works because I also save several passwords on the site on my PC to make it easier for me to automatically enter the site on another occasion. But I certainly will never save passwords on PCs that are used by the public like in internet cafes. Thats ridiculous to me.
hero member
Activity: 1064
Merit: 639
February 26, 2020, 09:26:46 PM
#26
Step # 4:
Change this Into

Woah nice trick you got there sir, didn't know it.
Thats why avoiding all software password storage options are a good thing. Don't trust any software in general. Verify, test.
thank you. Thanks for the compliment, Hope everyone has tested this
full member
Activity: 840
Merit: 105
★Bitvest.io★ Play Plinko or Invest!
February 26, 2020, 06:28:12 PM
#25
Today, we will see how you can hack any password, but only those who will have saved the password while logging in.
~

It is not hacking any password if it doesn't involved any password cracking or brute forcing. Saved passwords is already "Saved" then using such html tags isn't necessary. Also, browsers do already have the feature that shows you all saved passwords in it.

You could see it in Settings > Additional Settings > Auto-fill > Passwords > then click on the unhide icon beside the password saved. (I use Brave browser and this is the process of showing saved passwords)

member
Activity: 476
Merit: 62
February 26, 2020, 04:42:25 PM
#24
I always make it a point to delete the computer cache and history  I've used when ever I logged in an internet cafe, because some internet cafes are not using a deepfreeze software, so the computer always remember your history and your prints, but I'm glad I'm not going into the cafe since I have a laptop and netbook around
This is very good option because I am also doing this for some long time as one of my friend has some serious problems due to this password reminder mostly I try to avoid public computers because of security but sometime if I have to use then must try to delete all things after use.
legendary
Activity: 2296
Merit: 1014
February 26, 2020, 04:37:13 PM
#23
Step # 4:
Change this Into

Woah nice trick you got there sir, didn't know it.
Thats why avoiding all software password storage options are a good thing. Don't trust any software in general. Verify, test.
legendary
Activity: 2450
Merit: 1047
February 26, 2020, 12:06:26 PM
#22
I always make it a point to delete the computer cache and history  I've used when ever I logged in an internet cafe, because some internet cafes are not using a deepfreeze software, so the computer always remember your history and your prints, but I'm glad I'm not going into the cafe since I have a laptop and netbook around
legendary
Activity: 3668
Merit: 6382
Looking for campaign manager? Contact icopress!
February 26, 2020, 07:02:57 AM
#21
Firefox has an in built password manager, lockwise.
If you auto save your logins in firefox  this won't happen. But you should never do this is on public computers anyway.

Chrome has its own and it stores them encrypted with different password that the one for user profile.
But this doesn't matter. It was already said (I'll bold it and make it big) and it covers the story correctly:

You should never be logging in to anything using a public computer.
legendary
Activity: 2352
Merit: 6089
bitcoindata.science
February 26, 2020, 06:41:19 AM
#20
OP, your title is misleading, because from it alone it looks like you're telling to never save login information in the browser, but in your post you are only talking about public computers. There's nothing wrong with saving logins on your own computer, and if you use a master password, it's nearly as good as a full password manager, because your passwords will be encrypted.

I Agree
Firefox has an in built password manager, lockwise.
If you auto save your logins in firefox  this won't happen. But you should never do this is on public computers anyway.

Additionally,  every service states clearly not to save your logins in public computers.
legendary
Activity: 3024
Merit: 2148
February 26, 2020, 06:25:02 AM
#19
OP, your title is misleading, because from it alone it looks like you're telling to never save login information in the browser, but in your post you are only talking about public computers. There's nothing wrong with saving logins on your own computer, and if you use a master password, it's nearly as good as a full password manager, because your passwords will be encrypted.
legendary
Activity: 2044
Merit: 1018
Not your keys, not your coins!
February 26, 2020, 05:44:26 AM
#18
I forgot this one:

Don't copy and paste your passphrases, passwords, private keys, mnemonic seeds, login codes, etc. to browser bars

If you unintentionally do this (by carelessness), your vulnerable details will be saved by Search engines (default search engines of your browser). It will be more terrible if you use Google Chrome or Brave browsers because your search keywords will be stored on Google database. Google, in turn, can sell those data to who pay high for them.

If you do this with your important data, it's your turn to instantly change them all. Prevention is better than cure, just in case so please change them immediately when you unintentionally make mistakes.

More seriously, if your mis-copied&pasted are private keys or mnemonic seeds, you have to move your funds to new wallets as soon as possible. Wallets are freely created and it takes you a few minutes to create a new wallet and move your funds.

This advice can be applied for all computers, not only restricted to public computers.
hero member
Activity: 2520
Merit: 783
February 26, 2020, 05:16:08 AM
#17
I already have experience with this like I accidentally click the save password and at that time

If this happens, the easy way to do this is to change your password, but it would be better if you never save passwords on the browser.
We actually no need to change passwords, we can clean the cookies to get them erased from the saved password or you can go to the settings of the browser and clear it by yourself. But this is a very old trick, now there are many ways to find passwords you are using when you connected to public networks like free wifi.

Correct, many people knows that but still a good thing to see that posted here since for sure many people still not aware especially if they are in rush to go. But aside from that trick the simplest thing we can do for that is to click that x and shutdown the computer so that it will reset.

And for security better we should not log in our important accounts on public computers.
hero member
Activity: 2366
Merit: 793
Bitcoin = Financial freedom
February 26, 2020, 05:00:50 AM
#16
I already have experience with this like I accidentally click the save password and at that time

If this happens, the easy way to do this is to change your password, but it would be better if you never save passwords on the browser.
We actually no need to change passwords, we can clean the cookies to get them erased from the saved password or you can go to the settings of the browser and clear it by yourself. But this is a very old trick, now there are many ways to find passwords you are using when you connected to public networks like free wifi.
legendary
Activity: 2268
Merit: 18711
February 26, 2020, 04:47:11 AM
#15
You should never be logging in to anything using a public computer. Even if you clear all cookies and all the other advice given above, you have absolutely zero way of knowing that the computer doesn't contain keylogging or screen capturing software, or has a hardware keylogger built in, or is otherwise being monitored. Anything you do on a public computer should be assumed to be public knowledge. If you absolutely must use a public computer, then I would suggest booting to a Live OS from a USB stick you carry with you, although that still doesn't protect you against malicious hardware.

In terms of passwords, then use a password manage such as KeePass, which can provide protection against keyloggers by auto-inputting your passwords in to the relevant fields.
legendary
Activity: 2968
Merit: 3406
Crypto Swap Exchange
February 26, 2020, 02:54:02 AM
#14
Please test it on yourself, don't harm anyone
Just did it and it worked... Thanks for the warning, now that explains the objective [not for all of the cases] of a scammer that tries to gain remote access to someone else's computer.

Can you access this from a different computer?
If you give someone permission to remotely access your computer, they can use this method against you.

I use public WiFi in cafes and libraries all the time, but I would never use a public computer there.
That's equally bad & dangerous:

hero member
Activity: 2926
Merit: 795
February 26, 2020, 01:34:46 AM
#13
This scenario of password autologin were particular in computer shops or public computer used so we need to be careful. I remember when I was younger I always see other fb account in computer shops due to this. We should never do this same in any of our crypto account M, especially here in forum.
Pages:
Jump to:
© 2020, Bitcointalksearch.org