3 ms·
I just want to mention how insanely insecure browsers' native password managers are. It asks you password only on export but never to fill on sites and you can
by h1d 8y ago
I just want to mention how insanely insecure browsers' native password managers are. It asks you password only on export but never to fill on sites and you can see which sites are saved with no authentication, you just need access to the machine physically to access them all.
Why do browsers never implement something as easy as lock the vault with OS account pass after a certain period after unlocking like any password managers do?
- echanfsw 8y agoConvenience >> security for most people, unfortunately.
- h1d 8y agoWhat's wrong with opt-in locking? Current security is a joke. Physical access and you're owned.
- shawnz 8y ago> Why do browsers never implement something as easy as lock the vault with OS account pass after a certain period after unlocking like any password managers do? You must lock your workstation, it's not enough to just lock the password manager. If you leave your workstation unlocked then an attacker could install a keylogger that captures the password to unlock your password manager.