Search Results for: password manager

Yet more proof has surfaced that password managers put your entire digital life at risk

Posted on February 21, 2019

I’ve written several posts explaining the dangers of using a password manager to store the passwords to all of your online accounts.

Well, new information has recently surfaced that proves just how dangerous password managers really are.

The researchers at Independent Security Evaluators have just published the results of an in-depth study that tested how effective several of the most popular password managers are at protecting your passwords from hackers.

Well, the results are troubling to say the least. [Read more…]

Think password managers are safe? Truth be told, they’re quite dangerous.

Posted on February 12, 2018

Many of the web’s most widely respected tech experts recommend using a password manager such as KeePass to store all of your online passwords. I don’t recommend them however, and after reading this post you will understand why.

A typical password manager will store all of your passwords in an encrypted database. In order to “open” the database to extract a needed password you’ll have to enter a master password.

This sounds like a great idea for storing and protecting a bunch of unique passwords without having to remember them all, and the concept is indeed a great one. But unfortunately it is seriously flawed. Here’s why: [Read more…]

Yet another security flaw found in LastPass password manager

Posted on April 5, 2017

I’ve written before about the dangers of trusting a password manager to keep your passwords and the online accounts they correspond with secure.

Well, here’s yet another example that illustrates why I believe password managers are inherently risky.

One of the researchers with Google’s Project Zero has discovered and reported a very serious security flaw in one of the browser extensions that supports the popular LastPass password manager service.

According to the Google researcher, this flaw could potentially allow a hacker to insert malicious code into the flawed browser extension and steal your passwords – the very thing a password manager is supposed to prevent. [Read more…]

Scam alert: Don’t respond to update messages for your KeePass password manager!

Posted on June 3, 2016

scam Regular readers of this blog already know that I don’t recommend the use of password managers, for several reasons.

Well, a recently discovered security flaw in the popular KeePass password manager adds yet another reason to that list.

While the flaw in question doesn’t put the security of your passwords at risk directly, it does so indirectly by making it possible to accidentally download a malicious fake version of KeePass via the program’s normal update procedure. [Read more…]

The nasty Citadel Malware is now attacking password manager apps

Posted on November 22, 2014

scam I have never been all that keen on password manager apps because if a miscreant is able to compromise your master password, ALL of your passwords become available to the crook.

Not it seems that my paranoia concerning password managers was justified. The nasty Citadel malware that’s been compromising the websites of banks and other institutions of late has started attacking password manager apps via a special keylogger that’s built into the malicious code. [Read more…]