Using Your Browser To Save Passwords Is Not Secure
Using the autocomplete function in Internet Explorer to save user names and passwords or having Firefox remember passwords for sites is not a secure method of storing passwords.
I was recently checking out a handy little utility program called System Information for Windows when I clicked on an icon called ‘Secrets’ and BAM! there were all of my user names and passwords that were stored in my Firefox browser.
Eeek! I did a little research and found free utilities that can access your Firefox and Internet Explorer saved passwords – a potential security hole a mile wide. The video below shows the problem and what to do about it.
[flashvideo file=https://www.homeofficesmallbusiness.com/wp-content/videos/browsersecurity.flv /]The solution for Firefox passwords can be adding a master password that you enter each time Firefox starts and you go to a page that needs your user name and password. It stays in effect until you close Firefox.
There’s no remedy for Internet Explorer other than to disable autocomplete. While the passwords are encrypted, all you need is to be logged into your Windows profile to access the passwords.
The video also shows how to turn autocomplete on and turn autocomplete off in IE and to clear your autocomplete file.
One solution discussed is RoboForm. It cost $29.95 but may be worth it. It sits in your browsers and stores encrypted passwords, name, address, etc. for use as needed.
If anyone out there has another solution please comment below.