Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 1089769" data-attributes="member: 32260">Nowadays, any popular browser&#039;s built-in password management cannot be considered safe enough (only moderately safe). The attackers often use Malware-as-a-Service that is sufficiently sophisticated to exploit the vulnerabilities in the browser&#039;s built-in password management. Here is an example of such vulnerability:[URL unfurl=&quot;false&quot;]https://www.velonexit.com/2018/01/browser-vulnerability-that-allows-theft-of-saved-passwords/[/URL]More about the browser&#039;s built-in password management:[URL unfurl=&quot;false&quot;]https://www.itprotoday.com/edge-computing/edge-password-manager-may-make-it-safe-to-store-passwords[/URL][URL unfurl=&quot;false&quot;]https://www.kaspersky.com/blog/how-to-store-passwords-securely/48784/[/URL][URL unfurl=&quot;false&quot;]https://www.malwarebytes.com/blog/news/2023/11/should-you-allow-your-browser-to-remember-your-passwords[/URL][URL unfurl=&quot;false&quot;]https://www.cloaked.com/post/is-google-password-manager-safe[/URL][URL unfurl=&quot;false&quot;]https://questsys.com/cto-blog/How-Safe-Are-Password-Managers/[/URL]Interesting article about browser built-in and browser extension password managers:[URL unfurl=&quot;true&quot;]https://lock.cmpxchg8b.com/passmgrs.html[/URL]To bypass browser-based password management, the attacker must mainly infect the system or exploit the web browser. So, for average users, the browser&#039;s built-in password management is still better than using weak passwords. Password managers can also increase the protection against phishing (with some possible flaws), for example:[URL unfurl=&quot;true&quot;]https://jscrambler.com/blog/auto-failling-password-managers[/URL][MEDIA=medium]8e8f90e52918[/MEDIA]Post updated.</blockquote>

[QUOTE="Andy Ful, post: 1089769, member: 32260"] Nowadays, any popular browser's built-in password management cannot be considered safe enough (only moderately safe). The attackers often use [I]Malware-as-a-Service [/I]that is sufficiently sophisticated to exploit the vulnerabilities in the browser's built-in password management. Here is an example of such vulnerability: [URL unfurl="false"]https://www.velonexit.com/2018/01/browser-vulnerability-that-allows-theft-of-saved-passwords/[/URL] More about the browser's built-in password management: [URL unfurl="false"]https://www.itprotoday.com/edge-computing/edge-password-manager-may-make-it-safe-to-store-passwords[/URL] [URL unfurl="false"]https://www.kaspersky.com/blog/how-to-store-passwords-securely/48784/[/URL] [URL unfurl="false"]https://www.malwarebytes.com/blog/news/2023/11/should-you-allow-your-browser-to-remember-your-passwords[/URL] [URL unfurl="false"]https://www.cloaked.com/post/is-google-password-manager-safe[/URL] [URL unfurl="false"]https://questsys.com/cto-blog/How-Safe-Are-Password-Managers/[/URL] Interesting article about [I]browser built-in and browser extension[/I] password managers: [URL unfurl="true"]https://lock.cmpxchg8b.com/passmgrs.html[/URL] To bypass browser-based password management, the attacker must mainly infect the system or exploit the web browser. [B]So, for average users, the browser's built-in password management is still better than using weak passwords. Password managers can also increase the protection against phishing (with some possible flaws), for example:[/B] [URL unfurl="true"]https://jscrambler.com/blog/auto-failling-password-managers[/URL] [MEDIA=medium]8e8f90e52918[/MEDIA] [B]Post updated.[/B] [/QUOTE]

Verification