Reply to thread

Message

<blockquote data-quote="ForgottenSeer 98186" data-source="post: 1031197">What amazes me is that people are not understanding at all. Autofill is only one aspect of it. If a Bitwarden user does not use Autofill, they are still completely susceptible to hidden malicious iFrames when they select the login inside the BItwarden extension and double-click on it to fill the username and password fields for them. When they use that method, Bitwarden also fills the fields in any hidden iFrames.A user is only protected if they manually copy-pasta both the username and password from within Bitwarden. They should never use autofill whatsoever. Of course this is completely unpopular and unacceptable to a lot of users. Their view is that the primary purpose of a password manager is to fill the login for them. Nope. They are utterly wrong. That is just a convenience feature. Just proves how lazy and careless users are. So dependent upon convenience features that they will sacrifice their own security.</blockquote>

[QUOTE="ForgottenSeer 98186, post: 1031197"] What amazes me is that people are not understanding at all. Autofill is only one aspect of it. If a Bitwarden user does not use Autofill, they are still completely susceptible to hidden malicious iFrames when they select the login inside the BItwarden extension and double-click on it to fill the username and password fields for them. When they use that method, Bitwarden also fills the fields in any hidden iFrames. A user is only protected if they manually copy-pasta both the username and password from within Bitwarden. They should never use autofill whatsoever. Of course this is completely unpopular and unacceptable to a lot of users. Their view is that the primary purpose of a password manager is to fill the login for them. Nope. They are utterly wrong. That is just a convenience feature. Just proves how lazy and careless users are. So dependent upon convenience features that they will sacrifice their own security. [/QUOTE]

Verification