Saving pasword

marylee

Is it safe for firefox to save username and password for site like moneysaving expert,femail etc. so that I do not have to put it in every time I visit. It's only me and the family who is using it. For online banking Firefox usually remembers my customer number but I have asked for my password not to be saved. Do you guys think I am at security risk? It's such a pain to remember all these customer numbers and passwords. Thanks

Greensprout

if you don't mind your family been able to access your 'sites' then I don't see a security problem.

sra

You can set a master password to protect your other passwords.

Go to Tools / Options then the password tab then set a master password

You'll then be asked to set a master password once per session.


They discussed this in one of the security now podcasts - The mp3 and transcript is here

[font=Verdana,Arial,Helvetica,Sans-Serif,MS Sans Serif]Steve: We would certainly have to presume that whoever it was who was creating a password storage facility for the browser took advantage of, you know, state-of-the-art crypto. And, I mean, crypto is so strong now. As long as there's no mistakes made in the implementation of it, then you're really safe. Now, the flipside of that is, okay, what about if malware got into your computer and said, oh, I'm going to suck out all of the passwords in this browser? Well, I thought about that for a while. But my feeling is, well, if malware gets into your computer, you're pretty much hosed anyway.[/font][font=Verdana,Arial,Helvetica,Sans-Serif,MS Sans Serif]
Leo: They can record your keystrokes.[/font]
[font=Verdana,Arial,Helvetica,Sans-Serif,MS Sans Serif]Steve: Exactly. A keystroke logger to watch you type in a 16-character credit card number, do the little Mod 9 thing to verify that it is a valid credit card number, and then send to the mothership...[/font]

pchelpman

On a related point you might like to use this free program to store all your passwords ..........

http://www.help2go.com/Tutorials/Software_Applications/Store_Your_Passwords_Securely.html