Dangerous Browser Passwords

It can be maddening trying to track passwords for all the websites you visit. And your web browser will gladly store these passwords for you. But did you know that you (or anyone) can readily view these passwords stored in your PC's web browser?

• Anyone who shares your PC can see your passwords including your children, spouse, partner, friends and roommates.
• If your notebook or PC is stolen, the thief can easily access all your passwords.
  

Here's how to view your passwords:

Mozilla Firefox Go to Tools - Options - Security - Saved Passwords. You will see all the websites you visit including the usernames you use to login. Now click "Show Passwords" and presto, your passwords are available for all to see. But, on the Security tab, you can check the tab "Use a Master Password" then you will be required to enter a master password before viewing the website password list. Even this Master Password can be hacked with an easily obtained tool so it's not completely secure.

Google Chrome Click on the wrench icon in the upper right corner, select Options - Minor Tweaks - Show Saved Passwords. You will see your website list with the associated usernames. Select a username then click on the "Show Password" button and your password will be displayed. There is currently no provision to protect these passwords.

Internet Explorer Internet Explorer is only slightly safer because, although it stores passwords, it doesn't allow you to readily view them. But are applications available to allow you to view your passwords. Also, there is a snippet of readily available code that you can enter into your address window which will allow you to view the obscured password (******) at any website. This Java script works with all browsers.

What to do? There are ways to properly protect yourself but it requires discipline and knowledge. These are my recommendations:

• Don't store your passwords in your web browser. The setting to disable password caching can be found in the same location as to view your passwords. Also clear out the cached information.
• Create strong passwords. Use at least 8 characters/numbers and always use a mix of capital letters, lower case letters, numbers, and special characters.
• Use unique passwords. In other words, don't use the same password to login to your webmail and your bank account. That way if someone hacks one account, they won't automatically have access to all your accounts.
  
• Don't share your high security passwords with anyone. If necessary, create a special shared password, for example, if your staff all use a single login to access a vendor website.
  
• Don't write your passwords on a sticky note and paste it on your monitor or under your keyboard.
  
• Install Roboform to securely save website passwords. Roboform is free, easy to use and passwords are stored in an encrypted format. Roboform Pro is available for under $30 if you need more features. Roboform is not currently compatible with Google Chrome.