Security News 9 Popular Password Manager Apps Found Leaking Your Secrets

[Deleted member 2913]

Is anything safe? It's 2017, and the likely answer is NO.

Making sure your passwords are secure is one of the first line of defense – for your computer, email, and information – against hacking attempts, and Password Managers are the one recommended by many security experts to keep all your passwords secure in one place.

Password Managers are software that creates complex passwords, stores them and organizes all your passwords for your computers, websites, applications and networks, as well as remember them on your behalf.

But what if your Password Managers itself are vulnerable?

Well, it's not just an imagination, as a new report has revealed that some of the most popular password managers are affected by critical vulnerabilities that can expose user credentials.


The report, published on Tuesday by a group of security experts from TeamSIK of the Fraunhofer Institute for Secure Information Technology in Germany, revealed that nine of the most popular Android password managers available on Google Play are vulnerable to one or more security vulnerabilities.

More details - 9 Popular Password Manager Apps Found Leaking Your Secrets

 

[RXZ6Q]

Shame on them. I am happy to see that KeePass is not there

 

[Winter Soldier]

Well, each software is composed of thousands of code lines, can contain bugs and vulnerabilities.
Highlight these vulnerabilities is a great resource, because this allows to take awareness of the problems and then trying to solve them.
Password manager are by their nature sensitive applications, usually reliable but as we know 100% security does not exist, on any level.

 

[Deleted member 2913]

Shame on them. I am happy to see that KeePass is not there

I think only those 9 were tested...

 

[Rengar]

Thats why i dont trust password managers. Only my head

 

[Shadowave]

For this is good to use 2 authentication factor

 

[Azure]

In case someone didn't see it.

At the last paragraph of the article it states: Since the vendors have addressed all these above-listed issues, users are strongly advised to update their password manager apps as soon as possible

Shame on them. I am happy to see that KeePass is not there

Well, KeePass also had issues in the past.
KeePass Vulnerability Lets Attackers Steal Passwords (But Don't Expect It To Be Patched)

 

[SHvFl]

In case someone didn't see it.

At the last paragraph of the article it states: Since the vendors have addressed all these above-listed issues, users are strongly advised to update their password manager apps as soon as possible


Well, KeePass also had issues in the past.
KeePass Vulnerability Lets Attackers Steal Passwords (But Don't Expect It To Be Patched)

Plus this is the android application not the windows applications. So everyone not having a high end phone to get the latest OS upgrades is already in a situation with multiple vulnerabilities.

 

[BugCode]

Like LanDude, passwords had/has always be in my trustworthy head :blush: second opinion is ballpoint pen and piece of paper. Well, i hope everyone who use those services everything will go fine.

 

[Deleted Member 3a5v73x]

I'm happy that i ditched F-Secure KEY, those guys aren't even interested to improve their product. I wonder if SafeInCloud and Kaspersky Password Manager have any vulnerabilities..

 

[Deleted member 178]

The Article is about android apps...and everybody knows that androids apps are just made to grab money...They are often weak and fast made versions of Windows one.

 

[_CyberGhosT_]

Plus this is the android application not the windows applications. So everyone not having a high end phone to get the latest OS upgrades is already in a situation with multiple vulnerabilities.

Right SHvFI, the OP's Title needs edited to "honestly" reflect what we are about to read.
I get pissy about fear mongering titles like that, that try to broaden the audience it captures.
Edit it to something like:
Popular Android Password Manager Apps Found Leaking Your Secrets

 

[Atlas147]

I'm assuming that the apps tested are only applicable to Android versions of these apps, hopefully the desktop and iOS versions of these apps do not have the same vulnerabilities

 

[_CyberGhosT_]

I'm assuming that the apps tested are only applicable to Android versions of these apps, hopefully the desktop and iOS versions of these apps do not have the same vulnerabilities

Ohhh trust me brother if it included all versions the twits that wrote the title would have worded it something like:
EVERY PASSWORD MANAGER ON THE PLANET LEAKING YOUR ##### rofl

 

[Atlas147]

Ohhh trust me brother if it included all versions the twits that wrote the title would have worded it something like:
EVERY PASSWORD MANAGER ON THE PLANET LEAKING YOUR ##### rofl

Thank god, thought I would have to start changing my set up again

 

[Paul123]

I must admit, I'm paranoid and would never trust a password manager, particularly one that stored passwords online. I can see they are a good idea, being able to create super complex passwords, but I just like to keep my passwords close. At the moment I think the most secure place is in my head, even if I get the occasionally retrieval issue these days

 

[Bryan Lam]

Still more secure than storing passwords in chrome.

 

[Atlas147]

As of March 1st all vulnerabilities have been fixed

Source: 29 vulnerabilities found in top-rated password managers for Android

 

[Entreri]

Only place I store my passwords is in my head.

 

[_CyberGhosT_]

As of March 1st all vulnerabilities have been fixed

Source: 29 vulnerabilities found in top-rated password managers for Android

See, that's a much better and accurate title