3 ms·
Really? I thought browsers encrypt their user data & such with some type of user credentials?
by davchana 8y ago
Really? I thought browsers encrypt their user data & such with some type of user credentials?
- gruez 8y agoSuppose that's the case. How does the browser get the credentials? It's probably not from the user, because I never heard of a browser that requires a password at startup. It could be from the OS, but native "apps" aren't sandboxed, nor are they signed, so the OS has no way of differentiating between 2 apps.
- stephenr 8y ago> nor are they signed macOS apps are increasingly signed, because there are additional steps a user must take to run unsigned apps.
- icebraining 8y agoChrome on Windows encrypts the passwords using the Windows encryption functionality, which is tied to the user's account. Any software running on the same account can decrypt them.
- davchana 8y agoOh ok, so but in chrome, I have to type my windows password to reveal my saved password. Can a native.exe app do that without requiring me to type my windows password?
- icebraining 8y agoYes; Chrome doesn't actually use that password you type for anything, it just checks if it's correct - the function literally returns a single boolean. As soon as you're logged into your Windows account, they are available. In fact, if it wasn't so, Chrome would have to ask you for the Windows password for every form it wanted to fill with a password.