Having passwords automatically saved and filled in makes things MUCH simpler, especially for those who have multiple accounts, referencing multiple passwords. Of course we have all sat through the corporate PowerPoints on password security, and have all had that geeky nephew who hacked onto a neighbors internet just by knowing the name of their dog (another bad password). So beyond not making passwords really obvious, or even writing them on a post-it…did you ever consider how those passwords in your browser are stored? Unfortunately, they are much less secure than you probably thought…try this: If you are using Firefox on Windows, go to “Tools:Options” and an options dialoge window will appear. (If you’re on a OSX, same thing, just “FireFox:Preferences” from the Apple Menu Bar) From there, select the Security Tab along the top.
Notice the button that says “Saved Passwords”? If you click on this button, all of the accounts for which you have saved passwords will appear. From that dialogue, you can even click the “Show Passwords” button to reveal ALL of your saved passwords, for ALL of your accounts!
Crazy right? If its that easy to see these makes you think twice about storing your passwords, especially if there is the possibility of having anyone else use this machine! Not all is lost…notice however that there is whats called a Master Password. A Master Password is used to protect sensitive data like site passwords. If you create a Master Password, you will be asked to enter it once per session when Firefox retrieves saved information protected by that password. This way, YES, Firefox can store your passwords, and you dont have to worry so much about them being available in plain view. As a general rule of thumb, I would also caution you on storing bank passwords, and anything related to your SSN on any browser storage. If you are REALLY interested in taking password security to the next level, I would look at something like KeePass; a free password management tool that will encrypt your passwords for you, and even allow you to set up keyfiles that must be used to unlock the password “safe”.
In Summary, use a strong Master Password that you can remember so Firefox will protect your passwords, and feel more comfortable about the way your browser stores and uses your passwords.
The best way how to secure the browser is to use password manager like Sticky Password manager.
Havent heard of it, but I’ll have to check it out. Thanks for the comment!