4 ms·
>I'd bet that 80% of computer users just store their password in the built-in browser password managers (without even a Master password set) and be done with it
by ktta 9y ago
>I'd bet that 80% of computer users just store their password in the built-in browser password managers (without even a Master password set) and be done with it.
The misconception here is that setting a master password provides any real security. It isn't much different if you use a master password or not, once you have autofill, you're already compromised in that threat model.
- pbhjpbhj 9y agoHuh? So, someone boots your computer, assuming no login password, then launch your browser to get your passwords but need a master password -- how is that not protection? From the point of view of cracking the password file I'd assume that Mozilla use an encryption key for passing the password file around, just that the key is available to anyone who has access to any of your browsers?
- ktta 9y agohttp://lmgtfy.com/?q=how+to+get+password+from+autofill http://lmgtfy.com/?q=how+to+get+password+from+autofill