Thursday, February 15, 2007

Passwords

Probably all of you are asking browsers to remember passwords. But it is a very risky business. Just simple utility can reveal all your passwords stored in the Internet explorer. And it doesn't even require installing, but it can be run from USB disk! Firefox is a bit better. If you use it properly. If you set master password under Tools/Options/Security/Set master password, you are safe. All your passwords are encrypted on the disk, and no one can read them unless he knows password. Of course, the same relates to you, so Firefox won't fill your passwords unless you supply him with master password on the beginning of the session. But if you don't use master password, there is even option hidden deep in dialogs that allows one to see all passwords (Tools/Options/Security/Show Passwords/Show Passwords). To be clear, this doesn't just mean that you are unsafe if someone has physical access to your computer, but also that simple virus could retrieve all your passwords and send it to the virus creator. Though Firefox with Master passwords is fine solution (specially from the security point of view), Roboform is a much more advanced solution, which is also free. There are several advantages of these solution:
  • It can auto-fill all your forms, and even automatically log in, which both Firefox and Internet explorer can't;
  • There is separate program for your mobile device (both Windows Mobile and Palm), and you can sync your passwords with your desktop - and it is always are nice thing to have all your passwords with you;
  • Finally, this is important layer of security if you are using Internet explorer, which lacks it.