3 ms·
Personally I never let my browser remember my passwords, synchronized or not, precisely because it's a huge point of failure. I still think it's valuable for my
by bad_user 11y ago
Personally I never let my browser remember my passwords, synchronized or not, precisely because it's a huge point of failure. I still think it's valuable for my history to be securely synchronized, but my Firefox Sync account does not have my passwords. Even though I do trust Firefox Sync and I have a very secure password, so this has nothing to do with that. But imagine that you leave your laptop open, then somebody passing by can get any password just by going to any website in your browser. And of course, with an open laptop, you can argue that you can be compromised regardless, as that passerby could install a keylogger. But security is all about raising costs for potential attackers.
Lately I've been a 1Password user, so that has made things easier. But even before that I've had a system of generating unique passwords and I could tolerate the pain of a fresh browser instance, because "remember me" works just fine. The only account you should not lose access to is your email account, because that email account can be used to recover the passwords for every other account. It's also the one account for which you need a really strong password and preferably 2-factor authentication.
- icebraining 11y agoPersonally, I find it more convenient (and possibly safer) to use blueproximity to auto-lock my laptop if I forget to manually do so.