Your daily dose of practical, easy to follow tech tips!
Regular readers of this blog know the dangers involved with the use of password managers because I’ve written several posts pointing them out.
Well, the users of yet another password manager have had their passwords and other sensitive information stolen via a data breach.
Many of the web’s most widely respected tech experts recommend using a password manager such as KeePass to store all of your online passwords. I don’t recommend them however, and after reading this post you will understand why.
A typical password manager will store all of your passwords in an encrypted database. In order to “open” the database to extract a needed password you’ll have to enter a master password.
This sounds like a great idea for storing and protecting a bunch of unique passwords without having to remember them all, and the concept is indeed a great one. But unfortunately it is seriously flawed. Here’s why: [Read more…]
Regular readers of this blog already know that I don’t recommend the use of password managers, for several reasons.
Well, a recently discovered security flaw in the popular KeePass password manager adds yet another reason to that list.
While the flaw in question doesn’t put the security of your passwords at risk directly, it does so indirectly by making it possible to accidentally download a malicious fake version of KeePass via the program’s normal update procedure. [Read more…]
I have never been all that keen on password manager apps because if a miscreant is able to compromise your master password, ALL of your passwords become available to the crook.
Not it seems that my paranoia concerning password managers was justified. The nasty Citadel malware that’s been compromising the websites of banks and other institutions of late has started attacking password manager apps via a special keylogger that’s built into the malicious code. [Read more…]